JPMorganChase
Software Engineer III - DevSecOps / Compliance Platform Engineering
Be an Early Applicant
Build and maintain DevSecOps tooling for AWS cloud environments, including threat modeling, security guardrails, policy-as-code, vulnerability analysis, compliance reporting, and runtime security visibility. Develop automation for security findings and software supply chain controls, support audits and incident response, and provide remediation guidance to engineering teams. Collaborate with platform engineers, product squads, risk, and governance teams while using authorized AI-assisted development tools securely and validating generated outputs.
Job Description
At JPMorganChase, we understand that customers seek exceptional value and a seamless experience from a trusted financial institution. That's why we launched Chase UK to transform digital banking with intuitive and enjoyable customer journeys. With a strong foundation of trust established by millions of customers in the US, we have been rapidly expanding our presence in the UK and soon across Europe. We have been building the bank of the future from the ground up, offering you the chance to join us and make a significant impact.
As a Software Engineer III at JPMorganChase within the International Consumer Bank, you will be joining our Cloud Platform Engineering tribe in the Compliance Platform Engineering team. This team owns the security controls, compliance tooling, and guardrails that underpin the Chase UK cloud platform, trusted by over 2 million customers. You will work at the intersection of DevSecOps and platform engineering, embedding security into how we build and ship software in a regulated cloud-native environment.
This is a hands-on engineering role. The core of the work is understanding how services and cloud infrastructure are built, identifying where the risks are, and working with engineering teams to address them. You will build the tooling and automation that gives the business continuous visibility of its security posture, design and enforce cloud guardrails, and help teams understand and remediate their exposure. You will collaborate closely with platform engineers, product squads, and risk and governance teams.
Job responsibilities
- Perform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teams
- Design and implement cloud security guardrails and policy-as-code controls to enforce secure configuration at scale
- Build and maintain automation to detect, enrich, and report on security findings and compliance posture across AWS environments
- Assess and track vulnerability findings, providing contextual analysis to help teams understand and prioritize remediation
- Contribute to software supply chain security practices including dependency analysis and policy enforcement
- Work with risk, governance, and control teams to support audit evidence collection, reporting, and policy adherenceSupport runtime security tooling for production risk visibility and contribute to incident response activities including triage, investigation, and runbook development
- Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed, and productivity (e.g., code generation/refactoring, unit test creation, documentation), while validating outputs through peer review, automated testing, and secure coding standards
- Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation
Required qualifications, capabilities, and skills
- Formal training or certification on software engineering concepts and proficient applied experience
- Hands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS
- Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems
- Good working knowledge of AWS cloud security services including Identity and Access Management, CloudTrail, GuardDuty, Security Hub, and Key Management Service
- Experience building security automation and tooling using scripting or programming languages such as Python, Go, or Bash
- Good knowledge of infrastructure-as-code practices using tools such as Terraform
- Hands-on experience with Kubernetes and container orchestration in production environments
- Working knowledge of compliance frameworks relevant to financial services, such as PCI-DSS, ISO 27001, or NIST
- Hands-on experience using enterprise-authorized AI-assisted software development tools within the work environment (e.g., for coding, testing, troubleshooting, or documentation) with demonstrated ability to critically evaluate and validate AI-generated outputs
- Understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations
Preferred qualifications, capabilities, and skills
- Experience with cloud security tooling such as Wiz, Snyk, Semgrep, or Trivy
- Familiarity with policy-as-code tools such as Sentinel, Kyverno, or Checkov
- Knowledge of software supply chain security concepts including bill of materials, supply chain security frameworks, and dependency governance
- Familiarity with the UK regulatory environment including Financial Conduct Authority and Prudential Regulation Authority requirements
- AWS Security Specialty certification or equivalent
#ICBCareers
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
Similar Jobs
.png)
Fintech • Information Technology • Payments • Productivity • Software • Travel • Automation
Lead Navan’s executive engagement and community marketing programs for C-suite and VP audiences. Design and execute executive dinners, roundtables, advisory boards, VIP experiences, communications, and industry partnerships. Partner with Sales, Customer Success, executives, and product teams to build advocacy, accelerate pipeline, support retention, and generate opportunities. Establish KPIs, measure ROI, manage budgets and vendors, and develop scalable playbooks and operating processes.
Top Skills:
MarketoSalesforce
Beauty • Robotics • Design • Appliances • Manufacturing
Manage SEO strategy across expansion markets for an ecommerce business, improving organic visibility and revenue through on-page optimization, content planning, keyword research, merchandising SEO, and performance reporting. Partner with content, merchandising, UX, product, PR, performance marketing, and compliance teams. Develop strategies for featured snippets, AI Overviews, and generative search visibility while monitoring emerging GEO practices and ensuring AI-informed content follows Google guidelines.
Top Skills:
ChatgptClaudeFaq SchemaGoogle AnalyticsGoogle Search ConsoleLooker StudioPerplexityPower BISalesforce Commerce CloudSemrush
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Leads Mastercard’s global antitrust and competition law compliance policy. Responsibilities include conducting risk assessments, designing controls, monitoring compliance, developing training and communications, reporting to senior stakeholders, managing regulatory investigations, evaluating products and technologies, and improving processes through technology and AI. Advises senior business leaders and partners across legal, compliance, HR, and business teams on US and EU competition law requirements.
What you need to know about the Edinburgh Tech Scene
From traditional pubs and centuries-old universities to sleek shopping malls and glass-paneled office buildings, Edinburgh's architecture reflects its unique blend of history and modernity. But the fusion of past and future isn't just visible in its buildings; it's also shaping the city's economy. Named the United Kingdom's leading technology ecosystem outside of London, Edinburgh plays host to major global companies like Apple and Adobe, as well as a growing number of innovative startups in fields like cybersecurity, finance and healthcare.
