About the role
from listingBuild secure software that makes a difference. Join our agile cybersecurity team and grow your career from day one
In a world where cybersecurity threats evolve daily, your skills have never mattered more. At JPMorganChase, you'll work alongside some of the brightest minds in security engineering, tackling complex challenges that protect millions of customers and the integrity of global financial systems. This is your opportunity to grow your career within a firm that invests in your development and values your contribution from day one.
As a Security Engineer II at JPMorganChase within Corporate Technology & Cybersecurity (CTC), part of Global Technology, you are part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As an emerging member of the security engineering team, you execute foundational software solutions through the design, development, and troubleshooting of multiple components within a technical area, while gaining the skills and experience to grow within your role.
You will contribute to a team culture built on collaboration, continuous learning, and shared accountability — helping to safeguard one of the world's leading financial institutions.
Job responsibilities
Execute standard security solutions in accordance with existing playbooks to satisfy security requirements for internal clients, including product, platform, and application owners
Leverage enterprise-authorized AI capabilities to accelerate vulnerability analysis, synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately
Write secure, high-quality code using the syntax of at least one programming language, with limited guidance, to support security engineering objectives
Apply industry-standard tools to analyze and correlate incident data, identifying, interpreting, and summarizing the probability and impact of threats when determining specific vulnerabilities
Contribute to the delivery of continuity-related awareness, training, educational activities, and exercises to strengthen organizational resilience
Apply reuse-first, AI-assisted practices within software development lifecycle and toolchain routines to strengthen security testing and control validation, ensuring traceability, auditability, and alignment to resiliency and security expectations
Collaborate with cross-functional teams to support the identification and remediation of security risks across platforms and applications
Required qualifications, capabilities, and skills
Formal training or certification on security engineering concepts and 2+ years applied experience
Foundational experience developing security engineering solutions across design, development, and troubleshooting
Working knowledge of leveraging enterprise-authorized AI capabilities to support security engineering workflows, with strong validation habits and awareness of data sensitivity
Ability to review and validate AI-assisted code and security recommendations before use, escalating when uncertain and adhering to security and data handling requirements
Demonstrable ability to code in one or more programming languages
Experience across software development lifecycle execution, including agile methodologies such as continuous integration and continuous delivery, application resiliency, and security
Working knowledge of information and network security, technology risk management, and architectural concepts and patterns
Proficiency in using industry-standard tools to analyze incident data and support vulnerability assessment
Preferred qualifications, capabilities, and skills
Experience with cloud security concepts and tools across one or more major cloud platforms such as AWS, Azure, or Google Cloud
Familiarity with threat modeling frameworks such as STRIDE or MITRE ATT&CK
Exposure to security automation or scripting to support vulnerability management workflows
Understanding of regulatory and compliance frameworks relevant to financial services, such as NIST or ISO 27001
Experience contributing to security documentation, runbooks, or playbook development within an agile team environment
#CTC