Associate - Software Security Engineer

As a Security Engineer III at JPMorgan Chase within Cybersecurity and Technology Controls, you serve as a seasoned member of a team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behaviour. The solutions you build directly enable Cyber Operations users and stakeholders through delivery and refinement of critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions in support of the firm’s business objectives.

Job responsibilities

• Executes security solutions design, development, and technical troubleshooting with the ability to apply knowledge of existing security solutions to satisfy security  requirements for internal clients (e.g., product, platform, application owners and users)


• Creates secure and high-quality production code and maintains automations that run reliably and at scale with appropriate systems


• Leads mentorship and training awareness, training, educational activities, and exercises on vulnerabilities, best practices, and different design patterns


• Contributes to team culture of diversity, equity, inclusion, and respect

Required qualifications, capabilities, and skills

• Formal training or certification on software engineering concepts and 3+ years applied experience


• Experience developing security engineering solutions


• Proficient in coding in one or more programming languages (e.g., Python, Java, C++, etc.)


• Overall knowledge of the Software Development Life Cycle


• Demonstrated understanding of CI/CD, application resiliency, agile methodology, and application security

Preferred qualifications, capabilities, and skills

• Knowledge of Cloud Native Architecture


• Experience integrating SOLID principles to professional outcomes


• Familiarity with Test Driven Development principles


• Experience creating secure data feeds, maintaining case management systems, or implementing serverless designs