> Markdown version of [/jobs/ext/2698481-lead-software-security-engineer](https://www.wearedevelopers.com/jobs/ext/2698481-lead-software-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Software Security Engineer - **Company:** JPMorgan Chase & Co. - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Agile Methodology, Artificial Intelligence, Amazon Web Services, Amazon Elastic Compute Cloud, Software System Penetration Testing, Cloud Computing, Cloud Computing Security, Data Systems, DevOps, Python (Programming Language), Network Security, Systems Development Life Cycle, Akamai, Web Application Security, Security Software, Cloud-native Network Functions (CNF), Autoscaling, Software Security, AWS Lambda, Amazon Virtual Private Cloud (VPC), Cloudflare, Route53, Api Gateway, Software Coding, Terraform, Devsecops, Vulnerability Analysis - **Published:** September 3, 2026 - **Apply:** https://www.dice.com/job-detail/a5cd0542-f706-4a31-ae27-6e4645103cac ## About the Role * Formal training or certification on Security Engineering concepts and 5+ years of applied experience. * Advanced hands-on coding experience in java or Python/Go and Terraform. Expertise with AWS Infrastructure such as networking, EC2, Lambdas, server-less solutions, VPC, Route 53, autoscaling, Transit Gateway, API Gateway, Step Functions, secrets manager, and storage services. * Proficient in core concepts for Networking, Infrastructure as Code (IaaC), Public Cloud architecture, and Cloud Security. * Expertise in developing and designing complex cloud architectures, deploying scalable solutions, creating, and handling CI/CD pipelines, application resiliency, security design and implementation, and triaging issues in Agile Software Development Lifecycle methodology. * Extensive experience with threat modeling, discovery, vulnerability, and penetration testing. Ability to tackle design and functionality problems independently with little to no oversight. * Experience with WAF technologies such as AWS WAF, Akamai, Cloudflare, or similar. * Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity. * Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations. Preferred qualifications, capabilities, and skills * API Gateway Development * Custom proxy development ## Description As a Lead Software Security Engineer at JPMorganChase, you are an integral part of an agile team that works to enhance, build, and deliver trusted technology products in a secure, stable, and scalable way. Drive significant business impact through your capabilities and contributions, and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of challenges that span multiple technologies and applications., * Facilitate security requirements clarification for multiple networks to enable multi-level security, satisfying organizational needs for both ingress and egress traffic. Work at code-level using java/ Python and drive the maturity of the Cybersecurity software development lifecycle with an advanced understanding of line of business technology drivers. * Perform deployment, administration, management, configuration, testing, documentation, operations, and integration tasks related to Cloud Network Security Platforms, championing a DevOps security model to ensure security is automated and elastic across all platforms. * Lead and develop new Cloud Security Implementations for both ingress and egress traffic. Design and develop strategies to provide end-to-end automation, architecture design, performance and monitoring, best practices, proof of concepts, product design, and transition to operations. * Ensure quality control of engineering deliverables and ensure firm policies are compliant with strict security standards. Drive decision-making by analyzing complex data systems, ensuring all engineering activities are in conformance with firm policies & objectives. Leverage DevOps tools to build, harden, maintain, and develop a comprehensive Cloud-based security orchestration platform for network security and infrastructure as code. Develop automated security and compliance capabilities in support of DevOps processes in a large-scale Cloud computing environment. * Collaborate with technologists, stakeholders, and senior business leaders to recommend business modifications during periods of vulnerability. Be responsible for triaging based on risk assessments of various threats and managing resources to cover the impact of disruptive events. * Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations. Collaborate with cross-functional teams, including IT, development, and operations, to ensure web application security. * Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately., Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success. ## Related Videos - [What the Heck is Edge Computing Anyway?](https://www.wearedevelopers.com/videos/593-what-the-heck-is-edge-computing-anyway) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) ## Related Articles - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [What is Software Engineering in the Age of AI?](https://www.wearedevelopers.com/magazine/640-what-is-software-engineering-in-the-age-of-ai) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)