Senior Lead AI Security Engineer

JPMorgan Chase & Co.
Columbus, OH, United States
4 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours
Job source

Tech stack

Java (Programming Language) Application Programming Interfaces (APIs) Artificial Intelligence Cloud Computing Security Configuration Management Databases Cyber Security Information Engineering Data Integration Identity and Access Management Intrusion Detection and Prevention Python (Programming Language) Tensorflow
+21 more
Security Information and Event Management Data Streaming TypeScript User-Centered Design Policy as Code Pytorch Large Language Models Prompt Engineering Software Security Mttr Scikit Learn Kubernetes ONNX (Open Neural Network Exchange) Format Apache Kafka Machine Learning Operations Cyber Warfare Devsecops Security Orchestration, Automation & Response Static Application Security Testing Microservices Dynamic Application Security Testing

Job description

As a Senior Lead AI Security Engineer in our Cybersecurity team, you will design and deliver secure artificial intelligence solutions that support critical cyber use cases. You will play a key role in shaping platform standards and governance, collaborating with cross-functional teams, and driving innovation in secure AI. Together, we will build foundational capabilities and create lasting impact for our organization and the wider community., + Lead end-to-end design and delivery of AI solutions for cyber use cases, from problem framing and data integration to model development, evaluation, deployment, and monitoring.

  • Build secure LLM/RAG services and ML pipelines that integrate with SIEM/XDR, EDR, SOAR, IAM, ITSM, CMDB, code repos, and cloud telemetry.

  • Establish engineering standards for secure AI: prompt security, tool/function calling patterns, input/output validation, PII masking, secrets handling, and deterministic fallbacks.

  • Create evaluation harnesses with offline/online metrics, golden datasets, adversarial prompt sets, jailbreak tests, and safety/quality KPIs.

  • Partner with platform teams to stand up reusable AI components: LLM gateways, vector stores, feature stores, evaluation/observability, and governance workflows.

  • Implement drift and quality monitoring; define SLAs/SLOs; build incident response runbooks for AI-enabled services.

  • Collaborate with risk and MRGR-style governance partners to meet documentation, validation, and attestations; maintain model/AT inventories, monitoring plans, and change logs.

  • Deliver measurable impact: reduce MTTR, improve detection precision, automate control evidence collection, and accelerate secure engineering.

  • Mentor engineers and analysts; publish playbooks, templates, and safe prompt libraries; lead brown-bags and office hours for adoption.

  • Drive a roadmap of 2-3 flagship capabilities per year (e.g., SOC triage assistant, controls automation agent, DevSecOps code copilot).

Requirements

  • Minimum 7 years of software/security engineering, including hands-on experience in one or more of: detection engineering, SecOps, AppSec/DevSecOps, or cloud security.

  • Minimum 3 years building and operating applied ML/LLM systems in production (RAG pipelines, embeddings, fine-tuning/specialization, vector databases, model serving).

  • Proficiency in Python and at least one of: Java, Scala, or TypeScript; experience with microservices, APIs, containers, and Kubernetes.

  • Familiarity with SIEM, EDR, SOAR, IAM, and ITSM integrations; streaming/data engineering with Kafka or similar.

  • Experience with LLM orchestration and guardrails (prompt engineering, injection defense, tool calling, safety filters).

  • Hands-on with ML/LLM ecosystems: PyTorch or TensorFlow; scikit-learn; LangChain/LlamaIndex; ONNX/Triton/Ray

  • Strong understanding of secure SDLC, privacy, and data protection; ability to partner with governance to meet documentation and monitoring requirements.

  • Demonstrated ability to ship secure, reliable AI features with clear metrics and post-deployment monitoring.

Preferred qualifications, capabilities and skills

  • Experience building developer copilots for AppSec/DevSecOps (IaC scanning, secrets detection, SAST/DAST triage).

  • Cloud security engineering across one or more major providers; IaC and policy-as-code.

  • Experience or exposure to Cyber operations, Adversarial ML and LLM red teaming experience (prompt injection, data exfiltration, model abuse, poisoning defenses).

  • Graph ML for identity/threat detection; anomaly detection over telemetry.

  • GPU optimization, model quantization/distillation, and on-prem/private model deployment.

  • Familiarity with governance for AI/ML systems in regulated environments.

Benefits & conditions

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

About the company

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.juju.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:03 min

Career evolution in data engineering and AI platforms

Maria Apazoglou · Coffee With Developers

1:15 min

Key lessons learned from implementing automated mobile DevSecOps

Moataz Nabil Moataz Nabil · LIVE

2:35 min

Preventing remote code execution in PyTorch models

Balázs Kiss · WWC 2023

3:08 min

Aligning engineering processes with core business impact metrics

Chris Riley · WWC 2021

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

1:06 min

Compiling PyTorch environments for advanced time forecasting

Christoph Lohrmann Christoph Lohrmann +1 · WWC Europe 2026

Videos

See all

Related articles

See all