Lead Security Engineer- Java, Python

Lead Security Engineer focused on designing secure software solutions for private and public cloud environments, onsite in Columbus, OH, with hands-on Java and Python development within JPMorganChase's Cybersecurity and Technology Controls organization.

Responsibilities

• Architect and iterate distributed services prioritizing reliability, scalability, security, and operability across private and public cloud contexts
• Write code in Java and Python, establishing standards for clean design, readability, testability, and long-term maintainability
• Build and sustain production-grade services with Java Spring, ensuring scalable performance and resilience
• Leverage enterprise AI tools to speed threat modeling, vulnerability analysis synthesis, and security documentation, while validating outputs and safeguarding sensitive data
• Spot and remediate architectural risks, accrued technical debt, and systemic quality gaps before they affect production
• Assess design proposals and code changes for correctness, resilience, and maintainability over time
• Take end-to-end ownership of production behavior, including reliability, performance, incident response, and post-incident improvements
• Promote robust SDLC practices, including design reviews, testing strategies, release hygiene, and rollback planning
• Ensure ongoing alignment with security, audit, and compliance requirements as part of daily engineering
• Provide mentorship and technical leadership to elevate the craft of senior engineers on the team
• Implement reuse-first, AI-assisted methods within SDLC/tooling to strengthen security testing and control validation, maintaining traceability and alignment with resiliency and security goals

Requirements

• Formal training or certification in security engineering concepts and 5+ years of practical experience
• Proven experience designing and operating cloud-native systems in production environments
• Strong proficiency in Java and/or Python with a history of delivering clean, maintainable code
• Experience designing and working with relational and NoSQL databases in production (examples include DynamoDB, MongoDB)
• Experience using enterprise AI capabilities to support security engineering workflows, with strong validation discipline and awareness of data sensitivity
• Ability to review and validate AI-assisted code or security recommendations before adoption, escalating uncertainty and ensuring outcomes meet security, resiliency, and auditability standards
• Solid understanding of software engineering best practices including automated testing, CI/CD, and release management
• Experience owning production systems including incident management, on-call responsibilities, and post-incident reviews
• Excellent written and verbal communication skills, able to articulate technical decisions to both technical and non-technical audiences

Technologies

• Java
• Python
• Java Spring frameworks
• DynamoDB
• MongoDB

Benefits

• comprehensive health care coverage
• on-site health and wellness centers
• a retirement savings plan
• backup childcare
• tuition reimbursement
• mental health support
• financial coaching