You’re at the forefront of delivering secure software solutions. Join us a valued member of a top-performing team.
As a Security Engineer II at JPMorganChase within Corporate Sector , you will contribute to the development and operation of container security and vulnerability management and container security services that help protect the firm. You will work with experienced engineers and security specialists to identify, report, and help remediate security risks across application and infrastructure environments.
You will be part of an agile team focused on building secure, stable, and scalable technology solutions. This role is ideal for someone with strong software engineering fundamentals, an interest in security engineering, and hands-on experience with cloud, container, or vulnerability management technologies.
Job Responsibilities
Support the design, development, and maintenance of vulnerability management services used to identify and report security risks across the firm.
Improve the speed and accuracy of attributing vulnerabilities to affected applications, infrastructure, containers, and owning teams.
Build and enhance tools that provide application teams with clear, actionable remediation guidance.
Contribute to container security capabilities, including image scanning, vulnerability reporting, base image lifecycle tracking, and container inventory management.
Assist with efforts to shift container security earlier in the software development lifecycle by integrating security checks into CI/CD pipelines.
Work with Kubernetes-based services, container registries, and deployment platforms to support secure application delivery.
Develop and maintain backend services, APIs, automation scripts, and data processing workflows using languages such as Java or Python.
Help implement monitoring, dashboards, alerts, and operational checks to ensure services are reliable and meeting expected service levels.
Support audit, control, and reporting needs by helping collect evidence, improve documentation, and maintain operational records.
Collaborate with application, infrastructure, security, and platform teams to understand security issues and support remediation efforts.
Learn and apply industry best practices in vulnerability management, container security, secure software development, and production service operations. Use AI-assisted development tools responsibly to improve engineering productivity and customer support outcomes.
Required qualifications, capabilities and skills
Formal training or certification on software engineering, security engineering, infrastructure engineering, or a related technology role and 2+ years of applied experience.
Working knowledge of vulnerability management, application security, infrastructure security, or container security concepts.
Hands-on experience with at least one programming language such as Java, Python, or similar.
Familiarity with Docker, container images, container registries, and basic container security practices.
Experience working with Kubernetes or other container orchestration platforms.
Familiarity with CI/CD tools such as Jenkins, Spinnaker, or similar systems.
Basic understanding of infrastructure-as-code tools such as Terraform or similar technologies.
Ability to build, test, deploy, and support software components in a team environment.
Strong analytical and problem-solving skills, with attention to accuracy and operational detail.
Good communication skills and the ability to explain technical issues clearly to engineering and security stakeholders.
Preferred qualifications, capabilities and skills
Exposure to container security or vulnerability management platforms.
Experience supporting vulnerability remediation, asset inventory, runtime security, or cloud/container security capabilities.
Familiarity with observability tools, dashboards, alerts, and production support practices.
Experience working in agile software development teams.
Familiarity with the Go programming language.
Interest in learning enterprise-scale security engineering, container security, and secure platform operations.
