Software Security Engineer Associate

Your seniority as a security engineer puts you in the ranks of the top talent in your field. Play a critical role at one of the worlds most iconic financial institutions where security is vital.

As a Software Security Engineer - Associate within Cybersecurity Technology & Controls youserve as a seasoned member of a team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse circumvention and malicious behavior. Carry out critical technology solutions with tamper-proof audit defensible methods across multiple technical areas within various business functions in support of the firms business objectives

Job responsibilities

• Executes security solutions design development and technical troubleshooting with the ability to apply knowledge of existing security solutions to satisfy security requirements for internal clients (e.g. product platform application owners)
• Creates secure and high-quality production code and maintains algorithms that run synchronously with appropriate systems
• Applies specialized tools ( scanner) to analyzeand correlate incident data toidentify interpret andsummarize the probability andimpact of threats whendetermining specificvulnerabilities
• Minimizes security vulnerabilities by following industry insights and governmental regulations to continuously evolve security protocols including creating processes to determine the effectiveness of current controls
• Conducts discovery vulnerability penetration testing and threat scenarios on multiple organizational assets to identify and assess if vulnerabilities are present
• Executes threat modeling for multiple applications including external applications interacting with the internal JPMorgan Chase network
• Leads delivery of continuity related awareness training educational activities andexercises in collaboration with senior stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability
• Adds to team culture of diversity opportunity inclusion and respect

Required qualifications capabilities and skills

• Obtain 3 years of experience or equivalent knowledge with a Bachelors of Science in developing security engineering solutions along with design and implementation of cloud security solutions on AWS Azure or GCP for best technical practices
• Experience developing security engineering solutions
• Overall knowledge of the Software Development Life Cycle
• Proficient in coding in one of more languages and frameworks (e.g. Python Shell Scripting automation tools Terraform etc.)
• Implement security best practices and compliance requirements into actionable policies for a secure cloud environment
• Manage policy changes using version control systems like GIT and collaborate with teams on platforms in GIT or Bit bucket
• Solid understanding of agile methodologies such as CI/CD utilizing Terraform and Jenkins/Jules for infrastructure as a code to enhance deployments and updates for application resiliency and security
• Demonstrates effective communication and interpersonal skills

• Familiar with software engineering concepts in a major public cloud platform like AWS Azure or GCP or hybrid cloud experience
• Proficient in Python for automation backend development and cloud management tool integration with additional skills in Java being advantageous
• Strong understanding of security best practices and compliance standards for cloud environments

#CTC