> Markdown version of [/jobs/ext/2953714-lead-security-engineer](https://www.wearedevelopers.com/jobs/ext/2953714-lead-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Security Engineer

- **Company:** JPMorgan Chase & Co.
- **Location:** Columbus, OH, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Computer-Aided Design, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Audit Trail, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cloud Engineering, Configuration Management, Code Review, Continuous Integration, Linux, Desktop Virtualization, Digital Forensics, Disaster Recovery, Identity and Access Management, Python (Programming Language), Windows Servers, Windows PowerShell, Role-Based Access Control, Cloud Services, Runbook, Software Engineering, Virtual Machines, VMware Virtualization, Google Cloud, System Availability, Delivery Pipeline, Multi-Cloud, Git, Git Flow, Terraform, Software Version Control, Vulnerability Analysis
- **Published:** September 17, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2975849761-2

## About the Role

* Formal training or certification on security engineering concepts and 5+ years applied experience
 * Hands-on experience with AWS services including compute, networking, storage, identity management, and audit logging, with additional experience in Azure and/or Google Cloud Platform
 * Demonstrated experience with Terraform and Infrastructure-as-Code methodologies for provisioning and managing secure cloud environments
 * Experience building and maintaining continuous integration and delivery pipelines for infrastructure and platform releases
 * Proficiency in automation and scripting using Python, PowerShell, Bash, or similar languages to support platform operations and deployment workflows
 * Experience with Linux and Windows server administration in enterprise environments
 * Knowledge of cloud security principles including identity and access management, role-based access control, encryption, and compliance controls
 * Experience with source control management using Git, including branching strategies and code review practices
 * Demonstrated ability to review and validate AI-assisted code and security recommendations, ensuring outcomes align to security, resiliency, and auditability expectations, * Experience with digital forensics platforms and cloud-based investigative solutions supporting incident response workflows
 * Familiarity with VMware virtualization environments including virtual machine lifecycle management and virtual desktop infrastructure
 * Experience with container-based architectures and cloud-native application development patterns
 * Knowledge of threat modeling, vulnerability assessment, and penetration testing methodologies
 * Experience supporting disaster recovery, high availability, and resiliency initiatives across distributed cloud platforms

## Description

Take on a pivotal role where your expertise in cloud security and platform engineering will directly protect one of the world's largest financial institutions. As a Lead Security Engineer on the Digital Forensics Platform Engineering team, you will design and deliver the next generation of enterprise forensic investigation platforms - driving innovation, automation, and resilience at global scale.

As a Lead Security Engineer at JPMorganChase within the Digital Forensics Platform Engineering team, you will own the design, deployment, and automation of secure, cloud-native forensic investigation platforms across multi-cloud environments. You will work alongside engineering, cybersecurity operations, and cloud infrastructure teams to deliver scalable, resilient platforms that power global incident response and digital investigations. Your work will directly strengthen the firm's ability to detect, investigate, and respond to cybersecurity threats - making a measurable impact on the security of millions of customers and employees worldwide., * Design, deploy, and maintain enterprise digital forensics platforms across AWS, Azure, GCP, and on-premises environments, ensuring security, scalability, and high availability

 * Develop and manage Infrastructure-as-Code using Terraform to provision secure, repeatable, and auditable cloud environments
 * Build and maintain continuous integration and delivery pipelines supporting infrastructure and platform releases across multi-cloud environments
 * Implement automation for platform deployment, configuration management, monitoring, and operational processes to drive efficiency and reliability
 * Perform functional, validation, failover, and production readiness testing to ensure platform integrity and operational resilience
 * Implement cloud networking, storage, identity and access management, encryption, and security controls aligned to compliance and regulatory standards
 * Collaborate with cybersecurity operations, engineering, and cloud service teams to enhance platform reliability, scalability, and incident response capabilities
 * Apply AI-assisted practices within the software development lifecycle to strengthen security testing, control validation, and threat modeling, ensuring traceability and alignment to resiliency expectations
 * Create and maintain technical documentation, architecture diagrams, runbooks, and operational procedures to support platform governance and knowledge sharing


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)