Software Engineer III - Security Engineering

Join us and shape the future of secure software delivery. As a Lead Security Engineer, you’ll work at the intersection of security and platform engineering, designing impactful solutions that enable teams to move fast while managing risk. You’ll collaborate with talented squads, contribute to a culture that values unique perspectives, and foster growth, impact, and innovation. This is your opportunity to make a difference and advance your career in a dynamic, engineering-led environment. We’re committed to helping you thrive and grow.
As a Security Engineer at JPMorgan Chase in the Platform team, you will embed security into engineering workflows and deliver scalable, engineering solutions. You’ll work at the intersection of security and platform engineering, actively designing, building, and implementing security capabilities. Your role is hands-on, collaborating with squads to reduce platform risk and enable secure software delivery. You’ll help shape a modern, engineering-led approach to security, empowering teams to move fast while managing risk. Our culture values unique perspectives and fosters growth, impact, and innovation.
Job Responsibilities:
Design, build, and operate scalable security capabilities integrated into engineering workflows
Embed security into the software development lifecycle by implementing automated controls
Improve software supply chain security through SBOM generation and dependency visibility
Analyze and enrich vulnerability data with contextual information for effective remediation
Provide actionable insights and guidance to engineering teams to address security issues
Collaborate with platform and product engineering teams to drive secure development practices
Identify and assess security risks in runtime and cloud environments, supporting remediation
Support the development and operation of runtime security tooling for production risk visibility
Contribute to security incident response activities, including triage and investigation
Develop and maintain incident response processes, runbooks, and detection capabilities