Software Engineer III - DevSecOps - Kubernetes Security

London, United Kingdom2d ago

Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.

Skills

access controlagileauditci/cdcloud architecturecode reviewscrossplanegitopsgoinfrastructure as codekubernetespythonsdlcsecure codingterraformtest automationtroubleshootingunit testing

About the role

We are building something different. Born from a bold vision to bring a new kind of banking experience to customers, our team combines the stability and scale of JPMorganChase with the energy and pace of a startup. Here your ideas matter, your growth is supported, and the work you do has a direct impact on millions of people. If you are looking for a place where you can build deep expertise, grow alongside talented engineers, and contribute to something that genuinely matters, this is that place.

As a Software Engineer III at JPMorganChase within the Compliance Platform Engineering team, you sit where security and platform engineering meet. You will work alongside experienced engineers to design, build, and run the guardrails, compliance tooling, and automation that let our product teams move fast without losing control of risk. This is a role for someone who is curious, collaborative, and eager to grow — someone who wants to build deep expertise in cloud and container security while contributing to a team that genuinely values diversity of thought and experience.

Job responsibilities

Develop secure, high-quality production code and participate in code reviews, with guidance and mentorship from senior engineers
Contribute to the design and build of security guardrails and policy-as-code controls that enforce secure configuration at scale
Build and maintain automation that detects, enriches, and reports on security findings and compliance posture across cloud and Kubernetes environments
Embed security and compliance controls into infrastructure-as-code and delivery pipelines so policy is applied consistently and is easy to audit
Identify and automate the remediation of recurring issues to improve the reliability of controls and tooling
Support teams in understanding and prioritizing their vulnerability and compliance findings, and contribute to audit evidence and reporting for risk and governance partners
Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed, and productivity (e.g., code generation/refactoring, unit test creation, documentation), while validating outputs through peer review, automated testing, and secure coding standards
Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation

Required qualifications, capabilities, and skills

Formal training or certification on software engineering concepts and proficient applied experience
Hands-on experience with software development, testing, and troubleshooting in a professional or project-based environment
Proficiency, or a strong working foundation, in one or more programming languages such as Go or Python
Foundational understanding of cloud and container technologies, including core Kubernetes concepts
Working understanding of agile methodologies, CI/CD pipelines, and secure development practices
Exposure to infrastructure-as-code and policy-as-code practices using tools such as Terraform, Sentinel, Kyverno, or OPA
Hands-on experience using enterprise-authorized AI-assisted software development tools within the work environment (e.g., for coding, testing, troubleshooting, or documentation) with demonstrated ability to critically evaluate and validate AI-generated outputs
Understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations

Preferred qualifications, capabilities, and skills

Exposure to cloud and Kubernetes security concepts such as access control, workload security, network policies, and runtime security
Awareness of GitOps workflows and the Kubernetes operator pattern
Exposure to platform engineering tools such as Crossplane for managing cloud infrastructure through Kubernetes
Awareness of multi-region cloud architectures and their implications for consistent guardrails, compliance, and data residency
Awareness of software supply chain security concepts such as image scanning, trusted registries, and dependency governance
Familiarity with the UK regulatory environment including Financial Conduct Authority and Prudential Regulation Authority requirements

#ICBCareers

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.