Security Engineer [Multiple Positions Available]

JPMorganChase•Columbus, OH

1d•Onsite

About The Position

This position involves analyzing, designing, developing, debugging, testing, documenting, deploying, and providing production support for applications. The role requires working with product owners and Cyber security operations to refine business requirements and acceptance criteria. The engineer will understand business workflow requirements from the Cyber Operations team and Business Analysts and implement them as part of a distributed agile team. Key aspects include implementing test-driven development, Continuous Deployment, and Continuous Integration practices while adhering to JPMC software development processes. The role also involves supporting applications in Test and Production environments, identifying opportunities for process and tool improvements, and driving them from concept to implementation. Keeping abreast with the latest development practices and Pega roadmap is essential. The engineer will interact with business and cross-block teams, identify application impacts, and design technical specifications. Responsibilities also include project scoping, release management, build planning, technical documentation, and status reporting. The role involves leading the project team, providing technical training and mentoring for solution implementation, and ensuring quality standards through code metrics, reviews, and testing. Support for quality assurance, performance, and business user acceptance testing phases is also required. The engineer will drive and implement Tech Refresh initiatives to revamp underlying technology and application infrastructure to comply with enterprise-wide controls and policies, and work on application infrastructure related activities.

Requirements

Master's degree in Computer Science, Computer Engineering, or related field of study plus 3 years (36 months) of experience in the job offered or as Security Engineer, Systems Engineer, or related occupation.
Alternatively, a Bachelor's degree in Computer Science, Computer Engineering, or related field of study plus 5 years (60 months) of experience in the job offered or as Security Engineer, Systems Engineer, or related occupation.
3 years of experience with developing code and websites using Python, JavaScript, CSS, HTML, Tomcat and Java springboot through Intellij and VSCode Integrated Development Environments.
Experience with analyzing, designing, developing, debugging, testing, documenting, and deploying workflows using Java, J2EE, and Pega Rules Process Commander.
Experience with supporting Kubernetes platforms by orchestrating Docker images, ensuring deployment, scalability, and maintenance of containerized applications.
Experience with developing integrated communication between systems through a Microservices environment that deploys as a REST API.
Experience with building applications that utilize JSON and XML formatted data files and service payloads for data transfer.
Experience with performing data manipulation, data structuring, data design flow, and query optimization using SQL and Python.
Experience with developing SQL scripts, running, and managing them in database clients such as Oracle, MySQL, or PostgreSQL.
Experience with implementing test-driven development, Continuous Deployment, and Continuous Integration practices using JET, Jenkins, GitHub, and Bitbucket.
Experience with identifying opportunities for automation and implementing them using CA workload automation and Autosys jobs.
Experience with creating and refreshing infrastructure authentication and certificates by implementing SSL certificates and Entrust certificates, establishing SSO and Active Directory mechanisms.
Experience with ensuring quality standards are followed for deliverables through code metrics checks, code reviews, and unit and regression testing.
Experience with automating the testing of web applications using Selenium tooling and conducting code quality scans using SonarQube.
Experience with designing and building telemetry and usage tracking solutions for BI tools in Grafana to improve tool governance and monitoring.
Experience with interpreting log messages, metrics, and security events in Splunk.
Experience with developing secure and resilient applications with Application Resiliency, Software Architecture, System Design, Application Security, Application Risk Assessment, and Vulnerability Remediation.
Experience with delivering business workflow requirements with Agile tools utilizing Confluence and JIRA.

Responsibilities

Analyze, design, develop, debug, test, document, deploy and provide production support applications.
Work with product owner and Cyber security operations on agreeing on refining business requirements and acceptance criteria.
Understand business workflow requirements from Cyber Operations team and Business Analysts and implement those requirements as part of a distributed agile team.
Implement test-driven development, Continuous Deployment and Continuous Integration practices and adhere to JPMC software development process.
Assist team in supporting the application in Test and Production environments.
Identify opportunities for process and tool improvements and drive them from concept to design to implementation.
Keep abreast with the latest development practices and road map of Pega.
Interact with business and cross block teams, identifying application impacts, interface design and technical specification design documentation.
Project scoping, release management, build planning, technical documentation and status reporting.
Lead the project team, technical training and mentoring for implementation of solutions and roll outs.
Ensure all quality standards are followed for the deliverables through code metrics checks, code reviews, unit and regression testing.
Support quality assurance, performance and business user acceptance testing phases.
Drive and implement Tech Refresh initiatives to revamp the underlying technology and application infrastructure to make it compliant with enterprise-wide controls and policies.
Work on application infrastructure related activities.