Security Engineer III

Join us to shape the future of cybersecurity in Public Cloud environments. You will have the opportunity to build impactful solutions that safeguard our cloud resources and drive automation. At JPMorgan Chase, we value your expertise and encourage you to grow your skills while collaborating with diverse teams. Your work will directly influence our approach to cloud security and resiliency. Experience a culture that supports innovation, learning, and meaningful relationships.

As a Cloud Security Software Engineer in the Cybersecurity & Technology Controls group at JPMorgan Chase, you will proactively and strategically partner with all lines of business and functions to enable them to design, adopt, and integrate appropriate controls. You will deliver processes and solutions efficiently and consistently, and drive automation of controls in Public Cloud Environments. You will help build solutions relating to Cloud Environment Governance and Protection, Auditing, Monitoring, Remediation, and Reporting. You will develop software solutions to ensure a secure Public Cloud environment and implement sufficient controls to safeguard and protect resources in Public Clouds.

Job Responsibilities:

• Engage and improve the whole lifecycle of services-from inception and design through deployment, operation, and refinement
• Develop, test, deploy, maintain, and enhance software/tooling solutions
• Manage individual project priorities, deadlines, and deliverables
• Perform design and code reviews
• Develop and build solutions relating to Cloud Environment Governance and Protection, Auditing, Monitoring, Remediation, and Reporting
• Design, develop, and improve services to scale as the firm's cloud usage grows
• Use enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately

• Apply reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations

Required Qualifications, Capabilities, and Skills:

• BS degree in Computer Science or equivalent practical experience
• Proficiency and hands-on experience in AWS services, including Lambda, SQS, DynamoDB, EKS, etc
• Practical exposure with Infrastructure as Code (IaC) solutions such as Terraform and CloudFormation
• Experience in developing enterprise software and proficiency in multiple technologies, preferably Python
• CI/CD experience utilizing tools such as Github, Jenkins, etc
• Experience with development methodologies, e.g., Agile
• Work independently and collaborate within a team to develop meaningful relationships to achieve common goals
• Proficient verbal and written communication skills
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity

• Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements

Preferred Qualifications, Capabilities, and Skills:

• Savvy Cybersecurity knowledge in security postures risks management, e.g., vulnerability, misconfiguration, IaC, and threat detection
• Experience with Azure, GCP, or other Public Cloud environments is a plus

• Cloud Certifications including AWS Developer Associate, AWS Solutions Architect Associate

Employer Description:

The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm's cybersecurity, access management, controls, and resiliency teams. The team under the group focuses on cybersecurity in Public Clouds.