Lead Security Engineer - Cloud

Take on a crucial role where you'll be a key part of a high-performing team delivering secure cloud infrastructure solutions.

Make a real impact as you help shape the future of cloud security at one of the world's largest and most influential companies.

As a Lead Security Engineer - Cloud at JPMorgan Chase within the Cyber and Tech Controls line of business, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior.

Job responsibilities


* Support business technology teams to understand firm control requirements and implementations across a broad range of cloud architectures and applies specialized tools to analyze, correlate, identify, interpret, and summarize the probability and impact of threats when determining specific vulnerabilities


* Support the execution and enhancement of a long-term information risk and controls strategy designed to keep the information assets of the public cloud secure


* Deliver threat models and risk-based assessments of secure technology controls relating to cloud services, cloud platforms and architectural components


* Perform security reviews of infrastructure-as-code for cloud platform development


* Develop preventive and detective controls to enforce control requirements


* Interface with wider CTC teams ensuring platform integration with security operations, threat intelligence, infrastructure access management, and network security


* Executes creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems


* Develops secure and high-quality production code and reviews and debugs code written by others


* Adds to team culture of diversity, equity, inclusion, and respect

Required qualifications, capabilities, and skills


* Formal training or certification on security engineering concepts and 5+ years applied experience


* Experience in developing security engineering, and architecting solutions within public cloud technologies


* Experience with threat modeling


* Knowledge of cloud security posture management (e.g., Wiz, Prisma Cloud, Crowd Strike Falcon Cloud Security, etc.)


* Experience engineering with infrastructure as code (e.g., Terraform, Cloud Formation, etc.)


* Ability to convey complex security concepts to technical stakeholders


* Cloud native experience (e.g., AWS, Azure, or Google cloud)


* Skilled in planning, designing, and implementing enterprise level security solutions

Preferred qualifications, capabilities, and skills


* Cybersecurity certifications (i.e., Security, CEH, CCSP, GSEC, etc.)


* Cloud certifications (e.g., AWS, Azure, or GCP)

JPMorganChase, one of the oldest financial institutions, offers innovative ...