About this role
Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.
As a Lead Security Engineer at JPMorganChase within the Cybersecurity & Technology Controls team, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.
Job responsibilities
• Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements • Design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms • Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity • Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls that align with firm-wide policies and industry regulations • Oversee migration, upgrade, and consolidation of Hardware Security Module infrastructure, ensuring minimal disruption and maximum security throughout transitions • Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards including Payment Card Industry Data Security Standard and Federal Information Processing Standards • Troubleshoot and resolve infrastructure and Hardware Security Module-related issues, performing root cause analysis and implementing corrective actions using monitoring tools • Participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments • Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decision-making • Uses enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately. • Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations. Required qualifications, capabilities and skills
• Formal training or certification on security engineering concepts and 5+ years applied experience • Hands-on engineering experience with Hardware Security Modules, including expertise in architecture and system design of highly available infrastructure, disaster recovery, and business continuity strategies • Experience with network security, firewalls, and secure room operations and key ceremonies • Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments • Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies • Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments • Hands-on experience with OpenSSL and certificate-based authentication mechanisms • Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity. • Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements. Preferred qualifications, capabilities and skills
• Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting • Strong domain knowledge of payment processes and business resiliency applied to infrastructure design • Relevant Hardware Security Module platform certifications such as Thales or FutureX credentials • Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations