Software Engineer III - DevSecOps / Compliance Platform Engineering

vulnerability findings, providing contextual analysis to help teams understand and prioritize remediation Contribute to software supply chain security practices including dependency analysis and policy enforcement Work with risk, governance, and control teams to support audit evidence collection, reporting, and policy adherenceSupport runtime security tooling for production risk visibility and contribute to incident response activities including triage, investigation, and runbook development Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed, and productivity (e.g., code generation/refactoring, unit test creation, documentation), while validating outputs through peer review, automated testing, and secure coding standards Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by

automation Required Qualifications, Capabilities, And Skills Formal training or certification on software engineering concepts and proficient applied experience Hands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems Good working knowledge of AWS cloud security services including Identity and Access Management, CloudTrail, GuardDuty, Security Hub, and Key Management Service Experience building security automation and tooling using scripting or programming languages such as Python, Go, or Bash Good knowledge of infrastructure-as-code practices using tools such as Terraform Hands-on experience with Kubernetes and container orchestration in production environments Working knowledge of compliance frameworks relevant to financial services, such as PCI-DSS, ISO 27001, or NIST Hands-on experience using enterprise-authorized AI-assisted software development tools within the work environment (e.g., for coding, testing, troubleshooting, or documentation) with demonstrated ability to critically evaluate and validate AI-generated outputs Understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations Preferred Qualifications, Capabilities, And Skills Experience with cloud security tooling such as Wiz, Snyk, Semgrep, or Trivy Familiarity with policy-as-code tools such as Sentinel, Kyverno, or Checkov Knowledge of software supply chain security concepts including bill of materials, supply chain security frameworks, and dependency governance Familiarity with the UK regulatory environment including Financial Conduct Authority and Prudential Regulation Authority requirements AWS Security Specialty certification or equivalent About Us J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. About The Team Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success. #J-18808-Ljbffr