What are the responsibilities and job description for the Senior Lead Security Engineer - Network Security position at JPMorgan Chase?
Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.
As a Senior Lead Security Engineer at JPMorgan Chase within the Cybersecurity Technology and Controls organization, you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.
Job responsibilities
- Facilitates security requirements clarification for multiple networks to enable multi-level security to satisfy organizational needs
- Works at code-level (Python, Java, Go, or .NET) and drives the maturity of the Cybersecurity software development lifecycle with advanced understanding of line of business technology drivers
- Performs deployment, administration, management, configuration, testing, document, operations and integration tasks related to the Cloud Network Security Platforms and champion a DevOps security model to ensure security is automated and elastic across all platforms
- Leads and develops new Cloud Security Implementations
- Designs and develops strategies to provide end-to-end automation, architecture design, performance and monitoring, best practices, proof of concepts, product design, and transition to operations
- Ensures quality control of engineering deliverables and ensures firm policies are compliant with strict security standards
- Drives decision making by analyzing complex data systems, ensures all engineering activities are in conformance with firm policies & objectives
- Leverages DevOps tools to build, harden, maintain and develops a comprehensive Cloud-based security orchestration platform for network security and infrastructure as code
- Develops automated security and compliance capabilities in support of DevOps processes in a large-scale Cloud computing environment
- Collaborates with technologists, stakeholders, and senior business leaders to recommend business modifications during periods of vulnerability
- Be responsible for triaging based on risk assessments of various threats and managing resources to cover impact of disruptive events
Required qualifications, capabilities, and skills
- Formal training or certification on Security Engineering concepts and 5 years applied experience
- Skilled in planning, designing, and implementing enterprise-level security solutions
- Advanced hands-on coding in one or more programming languages such as Python, Java, Go, or .NET and Terraform
- Expertise with AWS Infrastructure such as networking, EC2, Lambdas, server-less solutions, VPC, routes53, autoscaling, Transit Gateway, API Gateway, Step Functions, secrets manager and storage services
- Proficient in core concepts for Networking, IaaC, Public Cloud architecture and Cloud Security
- Expertise developing and designing complex cloud architectures, deploying of scalable solutions, creating and handling CI/CD pipelines, application resiliency, security design and implementation, and triaging issues in Agile Software Development Lifecycle methodology
- Extensive experience with threat modeling, discovery, vulnerability, and penetration testing
- Ability to tackle design and functionality problems independently with little to no oversight
- Hands-on cloud native experience
- Certifications in AWS, Networking, or Security
