Software Engineer III - DevSecOps - Kubernetes Security

We are building something different. Born from a bold vision to bring a new kind of banking experience to customers, our team combines the stability and scale of JPMorganChase with the energy and pace of a startup. Here your ideas matter, your growth is supported, and the work you do has a direct impact on millions of people. If you are looking for a place where you can build deep expertise, grow alongside talented engineers, and contribute to something that genuinely matters, this is that place.

As a Software Engineer III at JPMorganChase within the Compliance Platform Engineering team, you sit where security and platform engineering meet. You will work alongside experienced engineers to design, build, and run the guardrails, compliance tooling, and automation that let our product teams move fast without losing control of risk. This is a role for someone who is curious, collaborative, and eager to grow - someone who wants to build deep expertise in cloud and container security while contributing to a team that genuinely values diversity of thought and experience.

Job responsibilities

• Develop secure, high-quality production code and participate in code reviews, with guidance and mentorship from senior engineers
• Contribute to the design and build of security guardrails and policy-as-code controls that enforce secure configuration at scale
• Build and maintain automation that detects, enriches, and reports on security findings and compliance posture across cloud and Kubernetes environments
• Embed security and compliance controls into infrastructure-as-code and delivery pipelines so policy is applied consistently and is easy to audit
• Identify and automate the remediation of recurring issues to improve the reliability of controls and tooling
• Support teams in understanding and prioritizing their vulnerability and compliance findings, and contribute to audit evidence and reporting for risk and governance partners
• Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed, and productivity (e.g., code generation/refactoring, unit test creation, documentation), while validating outputs through peer review, automated testing, and secure coding standards
• Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation

Required qualifications, capabilities, and skills

• Formal training or certification on software engineering concepts and proficient applied experience
• Hands-on experience with software development, testing, and troubleshooting in a professional or project-based environment
• Proficiency, or a strong working foundation, in one or more programming languages such as Go or Python
• Foundational understanding of cloud and container technologies, including core Kubernetes concepts
• Working understanding of agile methodologies, CI/CD pipelines, and secure development practices
• Exposure to infrastructure-as-code and policy-as-code practices using tools such as Terraform, Sentinel, Kyverno, or OPA
• Hands-on experience using enterprise-authorized AI-assisted software development tools within the work environment (e.g., for coding, testing, troubleshooting, or documentation) with demonstrated ability to critically evaluate and validate AI-generated outputs
• Understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations

Preferred qualifications, capabilities, and skills

• Exposure to cloud and Kubernetes security concepts such as access control, workload security, network policies, and runtime security
• Awareness of GitOps workflows and the Kubernetes operator pattern
• Exposure to platform engineering tools such as Crossplane for managing cloud infrastructure through Kubernetes
• Awareness of multi-region cloud architectures and their implications for consistent guardrails, compliance, and data residency
• Awareness of software supply chain security concepts such as image scanning, trusted registries, and dependency governance
• Familiarity with the UK regulatory environment including Financial Conduct Authority and Prudential Regulation Authority requirements