Cloud Security Engineer III - GCP

About This Role

This Cloud Security Engineer role within the Cybersecurity & Technology Controls (CTC) group focuses on ensuring the secure and compliant adoption of Public Cloud. The engineer will identify and manage risk-related issues and actions, requiring attention to detail and a broad understanding of security challenges across various technologies.

Responsibilities

• Support the execution and enhancement of a long-term information risk and control strategy for public cloud information assets
• Deliver risk-based assessments of secure technology controls related to cloud services, platforms, and architectural components
• Support business technology teams in understanding firm control requirements and implementations across diverse cloud architectures
• Perform security reviews of infrastructure-as-code for cloud platform development and participate in threat modeling activities
• Contribute to documentation and agile processes for security programs
• Interface with wider CTC teams to ensure platform integration with security operations, threat intelligence, IAM, and network security

Requirements

• Formal training or certification on Information Security concepts and expanding applied experience
• Eagerness to collaborate in a team, and comfortable in both virtual and office environments
• Self-disciplined, self-managed, self-motivated, and strong sense of ownership, urgency, and drive
• Proficient verbal and written communication skills, including the ability to effectively participate in discussions and meetings with internal management, peer groups, regulators, and senior stakeholders
• Ability to prioritize and work under stringent timelines

Nice to have:

• Keen desire to understand and secure public cloud technology
• AWS, Azure, or Google Cloud certifications
• Hands-on experience developing, engineering, or architecting within a public cloud environment
• Experience engineering with Terraform or infrastructure-as-code
• Understanding of DevOps or CI/CD concepts

About the Company

JPMorgan Chase & Co. is a top financial services firm with over $2 trillion in assets, operating in more than 60 countries. Its Cybersecurity & Technology Controls (CTC) group partners with all business lines to enhance cybersecurity, access management, and controls, focusing on enabling business operations while ensuring protection and resilience.