Lead Security Engineer

About the role

Join a world‑class cybersecurity team at JPMorgan Chase and protect critical payment and cryptographic operations. As a Lead Security Engineer you will design, implement and maintain secure, scalable infrastructure while driving innovation in hardware security.

Key responsibilities

• Lead architecture, design and documentation of complex Hardware Security Module (HSM) and cryptographic infrastructure.
• Deploy, configure, integrate and manage HSM solutions across Thales and FutureX platforms.
• Develop architectural diagrams, system documentation and operational runbooks.
• Define infrastructure standards, best practices and security controls in line with firm‑wide policies.
• Oversee migration, upgrade and consolidation of HSM infrastructure with minimal disruption.
• Provide guidance on cryptographic key management, confidential computing and compliance with PCI‑DSS and FIPS.
• Troubleshoot HSM‑related issues, perform root‑cause analysis and implement corrective actions.
• Participate in risk assessments, audits and incident‑response activities.

Required profile

• Formal training or certification in security engineering with 5+ years of hands‑on HSM experience.
• Strong Linux/Unix administration and network security expertise.
• Experience with infrastructure automation tools such as Terraform.
• Proficiency in OpenSSL, certificate‑based authentication and key ceremonies.
• Ability to use enterprise‑authorized AI tools to support security engineering workflows.

Required skills

• Hardware Security Modules (Thales, FutureX)
• Terraform
• Linux/Unix administration
• OpenSSL and certificate authentication
• Network security, firewalls, secure‑room operations
• Splunk or equivalent monitoring platforms
• AI‑assisted security analysis
• Cryptographic principles and key management