Lead Security Engineer

Salary: $61,000 - 101,000 per year Requirements: We require formal training or certification in public cloud environment concepts, along with advanced hands-on experience using cloud-native AI services such as Bedrock. We expect experience in threat modeling, discovery, vulnerability assessment, and penetration testing, including familiarity with MITRE ATLAS, OWASP Top 10 for LLMs, and core cybersecurity principles such as IAM, authentication, OIDC, and SAML. We need practical experience with Infrastructure as Code tools such as Terraform and CloudFormation. We require proficiency in Python scripting. We look for a strong understanding of AI and ML concepts and market trends, including foundational AI red teaming knowledge for designing and executing exercises across complex AI architectures. We need the ability to conceptualize, design, validate, and communicate inventive technical solutions to enterprise security challenges, including building internal tools, dashboards, and automation for red teaming work. Preferred: we value expertise in planning, designing, and delivering AI red teaming exercises and enterprise security solutions for generative AI, LLMs, and ML systems. Preferred: we value experience with AI security and red teaming tools and frameworks such as PyRIT, Garak, and custom LLM evaluation harnesses, as well as contributions to AI security or open-source security projects. Responsibilities: We develop and improve security strategies, red teaming programs, and solution designs, while resolving technical issues and building scalable approaches. We design secure, high-quality AI and software architectures, reviewing and challenging designs and code to strengthen adversarial resilience. We reduce AI and LLM security risks by applying industry standards and emerging AI safety research, and by evolving policies, testing methods, and controls. We collaborate with stakeholders across product, data science, cyber, legal, and risk to understand AI use cases and recommend changes during periods of increased vulnerability or regulatory change. We perform discovery, threat modeling, and adversarial testing on generative AI, RAG pipelines, and ML systems to uncover weaknesses such as prompt injection, jailbreaking, and data poisoning. We advise on secure design, logging, monitoring, and compensating controls for AI applications and platforms. We define and implement AI red teaming methods, playbooks, and success metrics, and establish processes for continuous testing and safe release of new AI models and features. We partner with platform and cloud security teams to ensure secure infrastructure configuration and alignment with enterprise security architecture. We engage with external researchers, vendors, and standards organizations to monitor emerging AI threats and bring best practices into our organization. We foster a team culture rooted in diversity, opportunity, inclusion, and respect. We work within a cross-functional team to build relationships, influence senior stakeholders, and align on AI risk tolerance and mitigation priorities. Technologies: AI Cloud IAM LLM Marketing OWASP Python RAG SAML Security Terraform More: We are collaborating with J.P. Morgan to hire for this Security Engineer role within Cybersecurity & Technology Controls for AI/ML. This is a key opportunity to help shape secure software solutions at one of the worlds largest and most influential companies, with a focus on tamper-proof, audit-defensible methods across multiple technical areas and business functions. J.P. Morgan is a global financial services leader serving major corporations, governments, wealthy individuals, and institutional investors, with a strong emphasis on long-term client partnerships, diversity, and inclusion. The role sits within our Corporate Functions team, supporting essential business areas such as finance, risk, human resources, and marketing. last updated 36 week of 2026