This listing doesn't post a salary. Most similar roles pay
$154,600–$208,800.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1117 open roles
on FindRole.
Listed pay typically runs
$186,160–$215,000
across 7 roles with salary data.
As a Sr Lead Security Engineer - Workforce within the Cybersecurity and Technology Controls team, you will serve as an individual contributor focused on technical execution and solution delivery. You will independently design, build, and implement advanced security solutions across cloud, hybrid, and on-prem environments while integrating security controls into the software development lifecycle. Your daily work involves writing code, developing automation, performing threat modeling using frameworks like STRIDE or PASTA, and managing incident response playbooks. You will utilize technologies including Python, C/C#, Go, Java, and Git, alongside tools such as Jenkins, GitHub Actions, Terraform, and Ansible. The role addresses complex security challenges in cloud-native architectures, zero trust environments, and container orchestration while leveraging AI-assisted practices to enhance security testing, risk analysis, and documentation across various technology domains including mobile and AI/ML systems.
Design, build, and implement advanced security solutions across cloud, hybrid, and on-premise environments.
Write code and develop automation to integrate security controls throughout the software development lifecycle.
Implement emerging technologies such as zero trust architectures, container security, and AI/ML-driven analytics.
Perform threat modeling and risk assessments to build security into products and new features.
Use enterprise-authorized AI tools to accelerate security risk analysis and documentation while ensuring data safety.
Develop and maintain incident response playbooks and lead technical post-incident reviews.
Provide technical guidance and perform code reviews for junior engineers.
What we're looking for
Obtain 5 plus years of applied training or certification on software engineering concepts.
Proven track record in hands-on design, development, and deployment of enterprise-grade security solutions in public cloud environments (AWS, GCP, Azure).
Advanced proficiency in at least one modern programming language (e.g., Python, C/C#, Go, Java) and scripting for automation.
Demonstrated ability to perform comprehensive threat modeling and risk assessments using frameworks such as STRIDE, DREAD, or PASTA.
Deep understanding of secure software development practices, including code review, static/dynamic analysis, and vulnerability remediation.
Experience implementing and managing CI/CD pipelines with integrated security testing and controls.
Expertise in version control systems (e.g., Git) and agile work management tools (e.g., Jira).
Ability to validate AI-assisted security recommendations while ensuring data sensitivity and auditability requirements are met.