This listing doesn't post a salary. Most similar roles pay
$154,644–$209,500.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1117 open roles
on FindRole.
Listed pay typically runs
$186,160–$215,000
across 7 roles with salary data.
As a Lead Security Engineer - Red Team within the Cybersecurity & Technology Controls for AI/ML team, you will serve as a core technical contributor focused on delivering secure software solutions that prevent misuse and malicious behavior. You will develop security strategies, design resilient architectures for generative AI and LLM systems, and conduct adversarial testing to mitigate risks like prompt injection, jailbreaking, and data poisoning. Your daily work involves threat modeling, creating red teaming playbooks, and collaborating with cross-functional stakeholders to ensure compliance during regulatory changes. The role requires proficiency in Python, Infrastructure as Code tools like Terraform and CloudFormation, and experience with cloud-native AI services such as Bedrock. You will utilize frameworks like MITRE ATLAS and OWASP Top 10 for LLMs while building internal tools and automation to secure complex machine learning pipelines.
Develop and enhance security strategies, red teaming programs, and scalable technical solutions for software systems.
Design secure AI architectures and review code to ensure resilience against adversarial attacks.
Mitigate AI and LLM vulnerabilities by implementing industry standards and emerging safety research.
Conduct threat modeling and adversarial testing on generative AI, RAG pipelines, and ML systems.
Provide guidance on secure design, logging, monitoring, and compensating controls for AI platforms.
Define and implement AI red teaming methodologies, playbooks, and success metrics for new model rollouts.
Ensure secure infrastructure configuration in alignment with enterprise security architecture and cloud standards.
Track emerging AI threats by engaging with external researchers, vendors, and industry standard bodies.
What we're looking for
Formal training or certification in Public Cloud environment concepts.
Advanced hands-on experience with cloud-native AI services like Bedrock.
Experience with threat modeling, vulnerability testing, and penetration testing (e.g., MITRE ATLAS, OWASP Top 10 for LLMs).
Knowledge of foundational cybersecurity concepts including IAM, Authentication, OIDC, and SAML.
Practical experience with Infrastructure as Code solutions such as Terraform and CloudFormation.
Proficiency in Python scripting.
Strong understanding of AI/ML concepts and knowledge of AI red teaming to design exercises for complex architectures.
Expertise in implementing security solutions for generative AI and LLMs (preferred); experience with specialized tools like PyRIT or Garak (preferred).
AI Security
LLM Security
Red Teaming
Python
Terraform
CloudFormation
Bedrock
Infrastructure as Code
Threat Modeling
OWASP Top 10 for LLMs
MITRE ATLAS
IAM
OIDC
SAML
RAG Pipelines
Prompt Injection
Cybersecurity