> Markdown version of [/jobs/ext/2563486-hiring-event-security-architecture-engineering-sep-24-25th-2026](https://www.wearedevelopers.com/jobs/ext/2563486-hiring-event-security-architecture-engineering-sep-24-25th-2026). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Hiring Event - Security Architecture & Engineering - Sep 24-25th 2026

- **Company:** JPMorgan Chase & Co.
- **Location:** McLean, VA, United States
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Agile Methodology, Artificial Intelligence, Amazon Web Services, Amazon S3, Applications Architecture, Microsoft Azure, C++ (Programming Language), Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Databases, Continuous Integration, Data Security, DevOps, Identity and Access Management, Python (Programming Language), Machine Learning, Node.Js, OAuth, Systems Development Life Cycle, RabbitMQ, Role-Based Access Control, Service-Oriented Architecture, Software Engineering, SQL Databases, Software Vulnerability Management, Web Applications, Web Services, SSL Certificate Management, Google Cloud, Spring Cloud, Istio, Software Security, Mitre Att&ck, Infrastructure as Code (IaC), Kubernetes, Production Code, Apache Kafka, Video Streaming, CIS Benchmarks, Api Gateway, Terraform, Golang, Microservices
- **Published:** August 14, 2026
- **Apply:** https://jpmc.fa.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1001/requisitions/preview/210780967

## About the Role

* Formal training or certification in software engineering/architecture with applied experience in system design, application development, and operational stability .Advanced proficiency in one or more languages: Java, Python, C/C++, Node, or Golang
 * Experience planning, designing, and implementing enterprise-level security solutions with fluent understanding of SDLC and agile methodologies (CI/CD, Application Resiliency)
 * Practical cybersecurity experience in one or more disciplines: AI/ML, Application Development, Cloud, Infrastructure, Mobile, Offensive Security, or Vulnerability Management
 * Extensive cloud-native experience (AWS, Azure, GCP) including Kubernetes, Lambda, ECS, S3, Aurora, API Gateway, and DevOps practices
 * Experience in security assessment, threat modeling, and secure design for cloud-native applications, including A2A security, certificate management, API security, and service mesh architectures
 * Expertise in IAM principles (RBAC, OAuth2.0, SCIM, WebAuthN, OPA, PBAC) with deep understanding of encryption, data security, and risk management
 * Experience with CIS Security baselines, configuration drift remediation, and hands-on security architecture
 * Proven experience building scalable microservices, enterprise-grade APIs, and high-availability database architectures (SQL, data modeling), with knowledge of streaming technologies (Kafka, RabbitMQ) .
 * Strong cross-functional influence, technical thought leadership, and ability to communicate complex concepts to senior executives.
 * Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
 * Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

Preferred Qualifications, Capabilities, and Skills

 * Experience with threat modeling methodologies such as STRIDE, MITRE ATT&CK, VAST, DREAD, IriusRisk, and PASTA
 * Experience with web, API, and microservices technologies including Web Applications, Web Services, and Service Oriented Architectures. Experience with Infrastructure as Code (IaC) utilizing tools such as Terraform
 * Experience with cloud security platforms such as AWS, Azure, and Google Cloud. Familiarity with security frameworks such as NIST, ISO 27001, and SOC 2
 * Proficiency in MCP and its application on how it can be used to secure agentic systems
 * Experience with Vendor Product Management, Services, and Tooling
 * Experience leading cross-functional security projects with strong communication and stakeholder management skills
 * Strategic thinker with a proactive approach to problem-solving, strong organizational and project management skills, and a commitment to continuous learning and professional development
 * Professional certifications such as CISSP, CISM, or CCSP . AWS certifications including Practitioner, Cloud Engineer, Software Development Engineer, Cloud Security Engineer, Cloud Security Architect, and Application Architect. Offensive Security certifications including OSCP, OSWP, OSCE, OSEE, OSWE, OSEP, and CEH

## Description

* Design, develop, and troubleshoot creative security solutions, producing secure, high-quality production code and reviewing code. Architect complex, scalable, and reusable cybersecurity frameworks for cloud and on-premises environments, driving standardization and consistency across the organization
 * Continuously evolve security protocols by assessing current controls, identifying gaps, and implementing improvements aligned with industry standards and governmental regulations
 * Implement and manage IAM protocols (RBAC, OAuth2.0, SCIM, WebAuthN, OPA, PBAC) and apply advanced security principles including encryption, data security, and risk management. Lead cybersecurity strategy for AI-enabled products and drive adoption of new technical methods, including leading proof-of-concept initiatives for emerging technologies
 * Translate complex technical issues to leadership, enabling strategic decisions about target state architecture
 * Serve as a subject matter expert, providing technical guidance to stakeholders, business leaders, technical teams, contractors, and vendors
 * Mentor engineering teams, advocate for firmwide SDLC best practices, and champion a culture of diversity, inclusion, and continuous learning.
 * Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.
 * Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.


## Related Videos

- [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall)
- [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023)
- [5 Reasons Why Attending Conferences in 2026 Matters More Than You Think](https://www.wearedevelopers.com/magazine/692-5-reasons-why-attending-conferences-in-2026-matters-more-than-you-think)