Security Engineer III-Python, Bash, Vulnerability Assessments

JPMorgan Chase maintains a global cybersecurity program designed to defend a sprawling mix of on-premises data centers and cloud environments. In the Security Engineer III role within the Cybersecurity & Technology Controls, Runtime Vulnerability Assessment team, you will operate and advance the firm’s vulnerability scanning program to ensure timely detection across all assets, from data centers to cloud workloads.

Job Description

Protecting a global financial institution relies on the strength of its people and systems. JPMorganChase seeks a skilled security engineer to operate and evolve the infrastructure that keeps the firm and the millions of people who depend on it protected. This position offers the chance to work at scale, make a meaningful impact, and advance your career within one of the world’s most sophisticated cybersecurity programs.

Responsibilities

• Operate and maintain the global scanner fleet, including appliance deployment, health monitoring, scan profile tuning, and failure recovery across Asia-Pacific, Europe, Middle East & Africa, and North American data centers.
• Develop and maintain automation tooling for scanner lifecycle management, including provisioning frameworks, agent packaging for Linux and Windows, and integration with internal deployment pipelines.
• Leverage enterprise-authorized AI capabilities to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Apply vulnerability scanning platforms to assess detection coverage, correlate findings, and identify gaps across managed and unmanaged asset populations.
• Collaborate with infrastructure and cloud engineering teams to ensure scan reachability across segmented networks, cloud workloads, and hybrid environments.
• Contribute to the development and maintenance of operational runbooks, continuity documentation, and coverage exercises to sustain scanning through infrastructure changes and major platform events.
• Analyze scan data and detection trends to surface actionable insights that inform enterprise risk prioritization and remediation workflows.
• Partner with cross-functional teams to support compliance scanning requirements and ensure alignment with regulatory and audit standards.
• Apply reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability and alignment to resiliency and security expectations.
• Champion engineering best practices, including infrastructure-as-code, version control, and change management within the vulnerability management program.

Requirements

• Formal training or certification on security engineering concepts with 3+ years of applied experience.
• Experience designing and operating vulnerability scanning solutions at enterprise scale, including scanner infrastructure, agent management, and scan orchestration.
• Proficiency in scripting and automation using Python, Bash, PowerShell, or configuration management frameworks.
• Demonstrated experience using enterprise-authorized AI capabilities within a work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements.
• Solid understanding of the software development lifecycle, including infrastructure-as-code practices and change management controls.
• Working knowledge of network fundamentals, including segmentation, firewall rules, and connectivity as they relate to scan reachability.
• Familiarity with agile methodologies and CI/CD practices within a security engineering context.
• Ability to communicate technical findings and operational risks clearly to both technical and non-technical stakeholders.

Technologies

• Python
• Bash
• PowerShell
• Qualys
• Tenable

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching
• Commission-based pay and/or discretionary incentive compensation (cash and/or forfeitable equity)

About Us

JPMorgan Chase & Co. is a long-standing financial services leader serving consumers, small businesses, and institutional clients across the globe. With a history spanning more than 200 years, the firm participates in investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management.

We offer a competitive total rewards package based on role, experience, and location, including benefits and programs designed to support employee needs. JPMorgan Chase is an equal opportunity employer that values diversity and inclusion and does not discriminate on protected attributes.

About The Team

The Corporate Functions at JPMorgan Chase cover a wide range of areas from finance and risk to human resources and marketing. These corporate teams play a critical role in enabling the business, supporting clients and customers, and positioning employees for success across the organization.