Lead Security Engineer- Java, Python

The Lead Security Engineer role is based onsite in Columbus, Ohio, and focuses on designing and delivering secure software solutions for private and public cloud environments. The position combines hands-on Java and Python development, systems design, and mentoring within JPMorganChase's Cybersecurity and Technology Controls organization.

Responsibilities

• Architect and enhance distributed services with emphasis on reliability, scalability, security, and operability across private and public cloud platforms.
• Contribute code in Java and Python, setting standards for clean design, readability, testability, and maintainability.
• Build and sustain production grade services using Java Spring frameworks, ensuring performance and resilience at scale.
• Leverage enterprise authorized AI tools to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, while validating outputs and safeguarding sensitive data.
• Identify and remediate architectural risks, technical debt, and systemic quality gaps before they reach production.
• Review design proposals and code changes for correctness, resilience, and long-term maintainability.
• Take end-to-end ownership of production behavior of systems, including reliability, performance, incident response, and post-incident improvements.
• Promote robust software development lifecycle practices such as design reviews, testing strategy, release hygiene, and rollback planning.
• Ensure ongoing alignment with security, audit, and compliance requirements as a core part of daily engineering.
• Provide technical mentorship and lead by example to elevate the craft of senior engineers across the team.
• Apply reuse-first, AI-assisted practices within SDLC and toolchains to strengthen security testing and control validation, maintaining traceability and alignment with resiliency and security expectations.

Requirements

• Formal security engineering training or certification with at least five years of hands-on experience.
• Proven experience designing and operating cloud-native systems in production environments.
• Excellent proficiency in Java and/or Python with a track record of delivering clean, maintainable code.
• Experience designing and operating relational and NoSQL databases in production, such as DynamoDB and MongoDB.
• Experience using enterprise authorized AI capabilities to support security engineering workflows with strong validation practices and awareness of data sensitivity.
• Ability to review and validate AI-assisted code or security recommendations before adoption, escalate uncertainties, and ensure outcomes meet security, resiliency, and auditability standards.
• Solid understanding of software engineering best practices including automated testing, CI/CD, and release management.
• Experience owning production systems including incident management, on-call responsibilities, and post-incident reviews.
• Excellent written and verbal communication skills, with the ability to clearly articulate technical decisions to both technical and non-technical audiences.

Technologies

• Java
• Python
• Java Spring frameworks
• DynamoDB
• MongoDB

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• A retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching