Lead Security Engineer- Cloud Devops Engineer

Lead Security Engineer

Take on a pivotal role where your expertise in cloud security and platform engineering will directly protect one of the world's largest financial institutions. As a Lead Security Engineer on the Digital Forensics Platform Engineering team, you will design and deliver the next generation of enterprise forensic investigation platforms — driving innovation, automation, and resilience at global scale.

As a Lead Security Engineer at JPMorganChase within the Digital Forensics Platform Engineering team, you will own the design, deployment, and automation of secure, cloud-native forensic investigation platforms across multi-cloud environments. You will work alongside engineering, cybersecurity operations, and cloud infrastructure teams to deliver scalable, resilient platforms that power global incident response and digital investigations. Your work will directly strengthen the firm's ability to detect, investigate, and respond to cybersecurity threats — making a measurable impact on the security of millions of customers and employees worldwide.

Job Responsibilities

Design, deploy, and maintain enterprise digital forensics platforms across AWS, Azure, GCP, and on-premises environments, ensuring security, scalability, and high availability

Develop and manage Infrastructure-as-Code using Terraform to provision secure, repeatable, and auditable cloud environments

Build and maintain continuous integration and delivery pipelines supporting infrastructure and platform releases across multi-cloud environments

Implement automation for platform deployment, configuration management, monitoring, and operational processes to drive efficiency and reliability

Perform functional, validation, failover, and production readiness testing to ensure platform integrity and operational resilience

Implement cloud networking, storage, identity and access management, encryption, and security controls aligned to compliance and regulatory standards

Collaborate with cybersecurity operations, engineering, and cloud service teams to enhance platform reliability, scalability, and incident response capabilities

Apply AI-assisted practices within the software development lifecycle to strengthen security testing, control validation, and threat modeling, ensuring traceability and alignment to resiliency expectations

Create and maintain technical documentation, architecture diagrams, runbooks, and operational procedures to support platform governance and knowledge sharing

Required Qualifications, Capabilities, and Skills

Formal training or certification on security engineering concepts and 5+ years applied experience

Hands-on experience with AWS services including compute, networking, storage, identity management, and audit logging, with additional experience in Azure and/or Google Cloud Platform

Demonstrated experience with Terraform and Infrastructure-as-Code methodologies for provisioning and managing secure cloud environments

Experience building and maintaining continuous integration and delivery pipelines for infrastructure and platform releases

Proficiency in automation and scripting using Python, PowerShell, Bash, or similar languages to support platform operations and deployment workflows

Experience with Linux and Windows server administration in enterprise environments

Knowledge of cloud security principles including identity and access management, role-based access control, encryption, and compliance controls

Experience with source control management using Git, including branching strategies and code review practices

Demonstrated ability to review and validate AI-assisted code and security recommendations, ensuring outcomes align to security, resiliency, and auditability expectations

Preferred Qualifications, Capabilities, and Skills

Experience with digital forensics platforms and cloud-based investigative solutions supporting incident response workflows

Familiarity with VMware virtualization environments including virtual machine lifecycle management and virtual desktop infrastructure

Experience with container-based architectures and cloud-native application development patterns

Knowledge of threat modeling, vulnerability assessment, and penetration testing methodologies

Experience supporting disaster recovery, high availability, and resiliency initiatives across distributed cloud platforms