Lead Security Engineer - Cloud

JPMorgan Chase - Plano, TX

Full-time

Plano, TX

Credit Intermediation and Related Activities

About the position

As a Lead Security Engineer - Cloud at JPMorgan Chase, you will play a crucial role in delivering secure cloud infrastructure solutions. You will be part of a high-performing team focused on shaping the future of cloud security, ensuring that software solutions meet functional and user requirements while preventing misuse and malicious behavior.

Responsibilities

• Support business technology teams to understand firm control requirements and implementations across a broad range of cloud architectures.
• Apply specialized tools to analyze, correlate, identify, interpret, and summarize the probability and impact of threats when determining specific vulnerabilities.
• Support the execution and enhancement of a long-term information risk and controls strategy designed to keep the information assets of the public cloud secure.
• Deliver threat models and risk-based assessments of secure technology controls relating to cloud services, cloud platforms, and architectural components.
• Perform security reviews of infrastructure-as-code for cloud platform development.
• Develop preventive and detective controls to enforce control requirements.
• Interface with wider CTC teams ensuring platform integration with security operations, threat intelligence, infrastructure access management, and network security.
• Execute creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems.
• Develop secure and high-quality production code and review and debug code written by others.
• Contribute to a team culture of diversity, equity, inclusion, and respect.

Requirements

• Formal training or certification on security engineering concepts and 5 years applied experience.
• Experience in developing security engineering and architecting solutions within public cloud technologies.
• Experience with threat modeling.
• Knowledge of cloud security posture management (e.g., Wiz, Prisma Cloud, Crowd Strike Falcon Cloud Security, etc.).
• Experience engineering with infrastructure as code (e.g., Terraform, Cloud Formation, etc.).
• Ability to convey complex security concepts to technical stakeholders.
• Cloud native experience (e.g., AWS, Azure, or Google cloud).
• Skilled in planning, designing, and implementing enterprise-level security solutions.

Nice-to-haves

• Cybersecurity certifications (i.e., Security, CEH, CCSP, GSEC, etc.).
• Cloud certifications (e.g., AWS, Azure, or GCP).