Lead Security Engineer, Attack Simulation Engineer

JPMorgan Chase

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Columbus, OHWilmington, DE
Employment: Full-time
Posted: 3 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $184k

$123k most similar roles pay here $236k

This listing doesn't post a salary. Most similar roles pay $152,150–$215,759.

Based on 240 similar postings.

Employer

About JPMorgan Chase

JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.

JPMorgan Chase currently has 1222 open roles on FindRole.

Most-posted roles

View all roles at JPMorgan Chase

At a glance

TL;DR · Lead Security Engineer, Attack Simulation Engineer

Role Posting Log in to save

Lead Security Engineer - Attack Simulation Engineer joins the Cyber Technology & Controls organization to lead the strategy, architecture, engineering, and lifecycle management of platforms powering cybersecurity operations. This role involves designing and operating complex hybrid environments across cloud and on-premises infrastructure while building software, automation, and infrastructure-as-code capabilities to improve reliability and reduce operational risk. The position focuses on developing tools for security testing, adversarial simulation, vulnerability research, attack analysis, and validation of cyber defenses. Required skills include advanced programming in Python, Go, Java, JavaScript/TypeScript, PowerShell, or Bash, alongside expertise in AWS, Azure, or Google Cloud Platform. Candidates must demonstrate experience with infrastructure-as-code tools like Terraform and Ansible, as well as utilizing enterprise-authorized AI and large language models to accelerate engineering, security analysis, testing, and automation within a complex financial services environment.

Skills

Python Go Java JavaScript TypeScript PowerShell Bash AWS Azure Google Cloud Platform Kubernetes Terraform Ansible Jenkins GitHub Actions GitLab CI infrastructure-as-code Identity and Access Management MITRE ATT&CK

What you'll do

Lead the architecture, engineering, and lifecycle management of cybersecurity platforms across cloud and on-premises environments.
Translate cybersecurity mission requirements into scalable, secure, and reusable technology capabilities for enterprise use.
Design and operate complex hybrid infrastructure including networks, systems, virtualization, storage, and identity management.
Develop software, automation, and infrastructure-as-code to improve operational efficiency and reduce risk.
Establish standards for secure configuration, access management, monitoring, patching, and disaster recovery.
Lead technical troubleshooting, incident response, and root-cause analysis for mission-critical platform issues.
Implement measurable operational controls and evidence practices to ensure auditability and regulatory compliance.
Integrate enterprise-authorized AI and large language models to accelerate engineering, security analysis, and automation.

What we're looking for

Formal training or certification on software engineering concepts and 10+ years of applied experience.
Demonstrated experience leading the architecture, engineering, and operation of complex enterprise or mission-critical platforms.
Strong experience in areas such as cloud infrastructure, network engineering, systems administration, storage, automation, or identity management.
Advanced programming or scripting skills in languages like Python, Go, Java, JavaScript/TypeScript, PowerShell, or Bash.
In-depth experience with AWS, Azure, Google Cloud Platform, or comparable cloud platforms.
Experience building automation and integrations across security, infrastructure, cloud, and enterprise technology services.
Experience with secure software development lifecycle practices, threat modeling, vulnerability management, and platform resiliency.
Demonstrated experience using enterprise-authorized AI and large language model capabilities in engineering or security workflows.
Advanced degree or relevant professional qualification in computer science, engineering, cybersecurity, or a related field (preferred).
Industry certifications such as CISSP, CCSP, Security+, AWS Security Specialty, or equivalent (preferred).
Experience supporting security operations, threat emulation, vulnerability research, or cyber-defense validation (preferred).
Experience with Kubernetes, containers, immutable infrastructure, or cloud-native platform engineering (preferred).
Experience with infrastructure-as-code and pipeline tooling such as Terraform, Ansible, Jenkins, GitHub Actions, or GitLab CI (preferred).
Experience with GPU-enabled infrastructure, AI/ML platforms, or high-performance computing environments (preferred).
Familiarity with threat-informed defense principles like MITRE ATT&CK and experience establishing SLOs and disaster-recovery plans (preferred).