Security Engineer II

As a Security Engineer II at JPMorgan Chase within the Corporate Sector - Cybersecurity and Tech Controls - Analyst Workflow and Orchestration team, you are part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As an emerging member of the security engineering team, you execute basic software solutions through the design, development, and troubleshooting of multiple components within a technical area, while gaining skills and experience to grow within your role.

Job responsibilities

• Executes standard security solutions in accordance with existing playbooks to satisfy security requirements for internal clients (e.g., product, platform, and application owners)
• Writes secure and high-quality code using the syntax of at least one programming language with limited guidance
• Applies specialized tools (e.g., vulnerability scanner) to analyze and correlate incident data to identify, interpret, and summarize probability and impact of threats when determining specific vulnerabilities
• Analyze, design, develop, debug, test, document, deploy and provide production support applications
• Work with product owner and Cyber Security operations on agreeing on refining business requirements and acceptance criteria 
• Understand business workflow requirements from Cyber Operations team/Business Analysts and implement those requirements in Java/J2EE and Pega Rules Process Commander platform as part of a distributed agile team.
• Assist team in supporting the application in QA and production environments
• Supports delivery of continuity-related awareness, training, educational activities, and exercises
• Adds to team culture of diversity, equity, inclusion, and respect

Required qualifications, capabilities, and skills

• Formal training or certification on security engineering concepts and 2+ years applied experience
• Basic experience developing security engineering solutions
• Demonstrable ability to code in one or more languages (e.g. Java, J2EE, Pega PPRC (Pega Rules Process Commander), and BPM, Oracle, AngularJS/React, Spring/Spring Boot, etc.)
• Database experience (RDBMS or NoSQL) required
• Experience across the whole Software Development Life Cycle
• Exposure to agile methodologies such as CI/CD, application resiliency, and security
• Working knowledge of information and network security, IT risk management, and architectural concepts and patterns
• Proficient in specialized tools (e.g., vulnerability scanner) used to analyze incident data

• Experience with Python and Java is preferred 
• Knowledge of Terraform, Code deploy, and containers is a plus
• Experience/Understanding with spring boot and micro services is a plus