Lead Security Engineer at JPMorganChase, onsite in Tampa, FL, delivering secure software solutions as part of a high-performing Cybersecurity team.

Develops and implements innovative security solutions, handling design, development, and technical troubleshooting beyond routine approaches to solve complex problems.
Creates secure production code and reviews or debugs code produced by teammates.
Reduces security vulnerabilities by applying industry insights and regulatory requirements, and by establishing processes to measure and improve current controls.
Utilizes enterprise-approved AI capabilities to accelerate threat modeling, vulnerability analysis, and security documentation, validating results and ensuring proper handling of sensitive data.
Collaborates with stakeholders and business leaders to understand security needs and recommends changes during periods of vulnerability.
Performs discovery, vulnerability assessments, penetration testing, and threat modeling across multiple assets, including external applications interfacing with the JPMorganChase network.
Incorporates reuse-first, AI-assisted practices within SDLC/toolchains to strengthen security testing and control validation, ensuring traceability and alignment with resiliency and security expectations.
Contributes to a team culture of diversity, opportunity, inclusion, and respect.
Collaborates effectively with teams located in multiple geographic locations.

5+ years of experience with Java and Python in cloud environments (public or private).
Proven ability to plan, design, and implement enterprise-grade security solutions.
Hands-on AI/ML engineering skills, including experience with frameworks such as PyTorch or TensorFlow, and MLOps with CI/CD and model deployment/monitoring.
Deep GenAI expertise (LLMs, prompt engineering, RAG, fine-tuning, embeddings/vector databases) and Agentic AI knowledge (tool/function calling, orchestration frameworks, multi-agent workflows, evaluation guardrails, and responsible AI/security).
Demonstrated experience using enterprise-approved AI capabilities to support security engineering workflows with strong validation practices and awareness of data sensitivity.
Ability to review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations.
Proficient in all aspects of the Software Development Life Cycle including development, testing, and implementation.
Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.
In-depth knowledge of the financial services industry and its IT systems.

Lead Security Engineer

Job Description