Security Engineer III-Python, Bash, Vulnerability Assessments

The security of a global financial institution depends on the strength of the people and systems behind it.

At JPMorganChase, we're looking for a skilled security engineer ready to operate and evolve the infrastructure that keeps our firm - and the millions of people who depend on us - protected.

This is your opportunity to work at scale, drive meaningful impact, and grow your career within one of the most sophisticated cybersecurity programs in the world.

As a Security Engineer III at JPMorganChase within the Cybersecurity & Technology Controls, Runtime Vulnerability Assessment team, you serve as a seasoned member of a team responsible for operating and advancing the firm's global vulnerability scanning program.

You will help ensure comprehensive, timely detection across every asset - from on-premises data centers to cloud environments - and contribute to the scanning backbone that supports enterprise-wide risk decisions.

You will carry out critical technology solutions with rigorous, audit-ready methods across multiple technical areas in support of the firm's business objectives.

Job responsibilities


* Operate and maintain the firm's global scanner fleet, including appliance deployment, health monitoring, scan profile tuning, and failure recovery across Asia-Pacific, Europe, Middle East & Africa, and North American data centers


* Develop and maintain automation tooling for scanner lifecycle management, including provisioning frameworks, agent packaging for Linux and Windows platforms, and integration with internal deployment pipelines.


* Uses enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately.


* Apply vulnerability scanning platforms to assess detection coverage, correlate findings, and identify gaps across managed and unmanaged asset populations


* Collaborate with infrastructure and cloud engineering teams to ensure scan reachability across segmented networks, cloud workloads, and hybrid environments


* Contribute to the development and maintenance of operational runbooks, continuity documentation, and coverage exercises to sustain scanning through infrastructure changes and major platform events


* Analyze scan data and detection trends to surface actionable insights that inform enterprise risk prioritization and remediation workflows


* Partner with cross-functional teams to support compliance scanning requirements and ensure alignment with regulatory and audit standards.


* Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.


* Champion engineering best practices, including infrastructure-as-code, version control, and change management, within the vulnerability manage...