Lead Security Engineer

Based onsite in Tampa, Florida, the Lead Security Engineer role at JPMorgan Chase contributes as a core technical contributor within a high performing Cybersecurity team. The position centers on delivering secure software solutions while collaborating across multiple business functions to prevent misuse and ensure secure software delivery.

Responsibilities

• Develops and implements creative security solutions, overseeing design, development, and debugging with the ability to move beyond routine approaches to solve complex problems.
• Writes secure, production-grade code and conducts reviews and debugging of code written by others.
• Minimizes security vulnerabilities by applying industry insights and regulatory guidance, and by establishing processes to measure the effectiveness of existing controls.
• Leverages enterprise‑approved AI capabilities to accelerate threat modeling, vulnerability analysis, and security documentation, while validating outputs and safeguarding sensitive data.
• Collaborates with stakeholders and business leaders to identify security needs and propose modifications during periods of vulnerability.
• Conducts discovery, vulnerability assessments, penetration testing, and threat scenarios across multiple assets to identify weaknesses, and performs threat modeling for applications including external interfaces with the internal JPMorgan Chase network.
• Incorporates reuse‑first, AI‑assisted practices within SDLC/toolchains to strengthen security testing, ensuring traceability, auditability, and alignment with resiliency and security expectations.
• Fosters a team culture that emphasizes diversity, opportunity, inclusion, and respect.
• Supports collaboration with teams located in different geographic locations.

Requirements

• 5+ years of experience with Java and Python in cloud environments (public and private).
• Proven ability to plan, design, and implement enterprise‑level security solutions.
• Hands‑on AI and ML engineering expertise, including frameworks such as PyTorch and TensorFlow, and MLOps with CI/CD and model deployment and monitoring.
• Extensive GenAI experience (LLMs, prompt engineering, RAG, fine‑tuning, embeddings/vector databases) and Agentic AI capabilities (tool and function calling, orchestration frameworks, multi‑agent workflows, evaluation/guardrails, and responsible AI/security).
• Experience applying enterprise‑authorized AI capabilities within security engineering workflows with strong validation practices and awareness of data sensitivity.
• Ability to review and validate AI‑assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations.
• Proficiency across all aspects of the Software Development Life Cycle, including development, testing, and implementation.
• Advanced understanding of agile methodologies, CI/CD, application resiliency, and security.
• In‑depth knowledge of the financial services industry and its IT systems.
• Education: Bachelor's Degree.

Technologies

• Java
• Python
• PyTorch
• TensorFlow
• CI/CD
• MLOps
• LLMs
• Vector databases

Benefits

• Base salary
• Commission-based pay
• Discretionary incentive compensation
• Cash
• Forfeitable equity
• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching