Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Lead Software Engineer (Java and Python) - Enterprise Technology Data Protection & Recovery
Columbus, OH · On-site
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Lead Software Engineer (Java and Python) - Enterprise Technology Data Protection & Recovery
Columbus, OH · On-site
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Lead Software Engineer (Java/Spring and Python) - Data Protection & Recovery
Columbus, OH · On-site
$120 - $180/hr
Partner with the engineeringleadthe secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Lead Software Engineer (Java/Spring and Python) - Data Protection & Recovery
Columbus, OH · On-site
$120 - $180/hr
Partner with the engineeringleadthe secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Lead Software Engineer (Java and Python) - Enterprise Technology Data Protection & Recovery
Columbus, OH · On-site
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Lead Software Engineer (Java and Python) - Enterprise Technology Data Protection & Recovery
Columbus, OH · On-site
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
206094 - DevSecOps
Columbus, OH · On-site
$62 - $81.50/hr
... DAST, SCA tools and integrate in the CI/CD pipeline • Good understanding of Azure Kubernetes and AWS Kubernetes • Must be able to design and architect the DevSecOps ecosystem from scratch • ...
206094 - DevSecOps
Columbus, OH · On-site
$62 - $81.50/hr
... DAST, SCA tools and integrate in the CI/CD pipeline • Good understanding of Azure Kubernetes and AWS Kubernetes • Must be able to design and architect the DevSecOps ecosystem from scratch • ...
Lead Software Engineer (Java and Python) - Enterprise Technology Data Protection & Recovery
Columbus, OH · On-site
$140 - $190/hr
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
Lead Software Engineer (Java and Python) - Enterprise Technology Data Protection & Recovery
Columbus, OH · On-site
$140 - $190/hr
Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene ...
SAST, DAST, SCA, secrets scanning, IaC scanning, container security, API security, threat modeling, or vulnerability management. * 1+ year of experience translating cybersecurity policies, standards ...
SAST, DAST, SCA, secrets scanning, IaC scanning, container security, API security, threat modeling, or vulnerability management. * 1+ year of experience translating cybersecurity policies, standards ...
Sr AWS Engineer - Hybrid
Columbus, OH · On-site
$60 - $70/hr
Develops and maintains CI/CD pipelines in GitLab, integrating SAST (SonarQube), DAST (Qualys), vulnerability scanning (Nessus), and Terraform automation * Translates FedRAMP/NIST 800-53 Rev 5 ...
Sr AWS Engineer - Hybrid
Columbus, OH · On-site
$60 - $70/hr
Develops and maintains CI/CD pipelines in GitLab, integrating SAST (SonarQube), DAST (Qualys), vulnerability scanning (Nessus), and Terraform automation * Translates FedRAMP/NIST 800-53 Rev 5 ...
206094 - DevSecOps
Columbus, OH · On-site
$130 - $170/hr
... DAST, SCA tools and integrate in the CI/CD pipeline * • Good understanding of Azure Kubernetes and AWS Kubernetes * • Must be able to design and architect the DevSecOps ecosystem from scratch ...
206094 - DevSecOps
Columbus, OH · On-site
$130 - $170/hr
... DAST, SCA tools and integrate in the CI/CD pipeline * • Good understanding of Azure Kubernetes and AWS Kubernetes * • Must be able to design and architect the DevSecOps ecosystem from scratch ...
Senior IT Risk Project Manager
Columbus, OH · On-site
$140 - $170/hr
SAST/DAST/SCA, dependency and supply chain risk, threat modelling #J-18808-Ljbffr
New
Senior IT Risk Project Manager
Columbus, OH · On-site
$140 - $170/hr
SAST/DAST/SCA, dependency and supply chain risk, threat modelling #J-18808-Ljbffr
New
Application Security & DevSecOps Architect
Dublin, OH · On-site
$100 - $130/hr
DAST (Qualys, Burp Suite, OWASP ZAP, Invicti) * SCA, IaC scanning, container security tools * Strong knowledge of: * OWASP Top 10, CWE Top 25 * Threat modeling (STRIDE, PASTA, or equivalent) * API ...
Application Security & DevSecOps Architect
Dublin, OH · On-site
$100 - $130/hr
DAST (Qualys, Burp Suite, OWASP ZAP, Invicti) * SCA, IaC scanning, container security tools * Strong knowledge of: * OWASP Top 10, CWE Top 25 * Threat modeling (STRIDE, PASTA, or equivalent) * API ...
Working knowledge of secure software development methodologies and application security tools, including static (SAST) and dynamic (DAST) analysis, combined with moderate hands-on knowledge of cloud ...
Working knowledge of secure software development methodologies and application security tools, including static (SAST) and dynamic (DAST) analysis, combined with moderate hands-on knowledge of cloud ...
Lead Security Architect (Application Security)
$131K - $206K/yr
Experience with SAST, DAST, SCA, IaC scanning, and software supply chain security controls * Experience with cloud-native architectures, containers, Kubernetes, microservices, and APIs * Knowledge of ...
Lead Security Architect (Application Security)
$131K - $206K/yr
Experience with SAST, DAST, SCA, IaC scanning, and software supply chain security controls * Experience with cloud-native architectures, containers, Kubernetes, microservices, and APIs * Knowledge of ...
Senior Lead AI Security Engineer
Columbus, OH · On-site
$107K - $147K/yr
Experience building developer copilots for AppSec/DevSecOps (IaC scanning, secrets detection, SAST/DAST triage). * Cloud security engineering across one or more major providers; IaC and policy-as ...
Senior Lead AI Security Engineer
Columbus, OH · On-site
$107K - $147K/yr
Experience building developer copilots for AppSec/DevSecOps (IaC scanning, secrets detection, SAST/DAST triage). * Cloud security engineering across one or more major providers; IaC and policy-as ...
Implement and maintain DAST and runtime security testing in delivery pipelines using tools such as OWASP ZAP, Burp, Nuclei, or equivalent * Support security-focused CI/CD practices including secrets ...
Implement and maintain DAST and runtime security testing in delivery pipelines using tools such as OWASP ZAP, Burp, Nuclei, or equivalent * Support security-focused CI/CD practices including secrets ...
DAST (Qualys, Burp Suite, OWASP ZAP, Invicti) * SCA, IaC scanning, container security tools * Strong knowledge of: * OWASP Top 10, CWE Top 25 * Threat modeling (STRIDE, PASTA, or equivalent) * API ...
DAST (Qualys, Burp Suite, OWASP ZAP, Invicti) * SCA, IaC scanning, container security tools * Strong knowledge of: * OWASP Top 10, CWE Top 25 * Threat modeling (STRIDE, PASTA, or equivalent) * API ...
Senior Lead AI Security Engineer
$107K - $147K/yr
Experience building developer copilots for AppSec/DevSecOps (IaC scanning, secrets detection, SAST/DAST triage). * Cloud security engineering across one or more major providers; IaC and policy-as ...
Senior Lead AI Security Engineer
$107K - $147K/yr
Experience building developer copilots for AppSec/DevSecOps (IaC scanning, secrets detection, SAST/DAST triage). * Cloud security engineering across one or more major providers; IaC and policy-as ...
Dast information
See salary details
$68K - $79.2K
5% of jobs
$79.2K - $90.5K
6% of jobs
$90.5K - $101.7K
11% of jobs
$103.9K is the 25th percentile. Wages below this are outliers.
$101.7K - $112.9K
15% of jobs
The median wage is $121.2K / yr.
$112.9K - $124.1K
18% of jobs
$124.1K - $135.4K
16% of jobs
$140.1K is the 75th percentile. Wages above this are outliers.
$135.4K - $146.6K
11% of jobs
$146.6K - $157.8K
8% of jobs
$157.8K - $169K
5% of jobs
$169K - $180.3K
4% of jobs
$180.3K - $191.5K
1% of jobs
$68K
$126.8K
$191.5K
How much do dast jobs pay per year?
What are popular job titles related to Dast jobs?
For Dast jobs, the most frequently searched job titles are:
What job categories do people searching Dast jobs look for?
The top searched job categories for Dast jobs are:
What cities are hiring for Dast jobs?
Cities with the most Dast job openings:
What states have the most Dast jobs?
States with the most job openings for Dast jobs include:

Lead Software Engineer (Java and Python) - Enterprise Technology Data Protection & Recovery
Columbus, OH
Full-time
Medical, Retirement
Posted 14 days ago
JPMorgan Chase & Co. rating
8.0
Based on 497 frontline employees who took The Breakroom Quiz
71st of 172 rated banks
Job description
Push the limits of what's possible with us as an experienced member of our Software Engineering team.
As a Lead Software Engineer at JPMorgan Chase within the Enterprise Technology Data Protection & Recovery product line, you will be an essential member of an agile team dedicated to enhancing, building, and delivering trusted, market leading technology products in a secure, stable, and scalable manner. Your role will involve promoting significant business impact through your skills and contributions, utilizing your deep technical expertise and problem solving methodologies to address a wide range of challenges across technologies and applications. You will collaborate with global product and engineering teams and platform stakeholders to deliver resilient, efficient, and innovative solutions that advance the firm's strategic objectives.
Job Responsibilities
- Provide hands on technical leadership and guidance across teams; serve as function wide subject matter expert in resiliency and recovery observability.
- Own end to end architecture for critical Java services: define domain boundaries, API contracts, event schemas, and cross-service standards; steward architectural decision records.
- Design, develop, and review secure, high quality production code in Java; debug complex issues; mentor engineers through code reviews and technical coaching.
- Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.
- Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.
- Drive resilient service design: drive and manage availability SLOs, latency budgets, and error budgets.
- Partner with the engineering lead the secure SDLC: conduct threat modeling; integrate SAST/DAST and dependency risk management; ensure encryption in transit/at rest and robust secrets hygiene; oversee authN/authZ patterns.
- Champion observability and SRE practices: instrument metrics/logs/traces; design actionable alerts; author runbooks; lead incident response, blameless postmortems, and continuous reliability improvements.
- Advance data protection and recovery capabilities: maintain evidence chain of custody and immutable operation, restore validation exercises and auditability.
- Enhance existing systems by analyzing objectives, preparing action plans, and identifying opportunities for performance, reliability, and operability improvements.
- Help support CI/CD quality within the product line, partnering with the engineering and product teams: codify automated tests (unit, integration, contract, performance), coverage targets, pipeline quality gates, and progressive delivery (canary/blue-green) with rollback plans.
- Contribute to the engineering community as an advocate of firmwide frameworks, tools, and best practices; add to team culture by fostering diversity, inclusion, and respect.
- Support critical environments (Development, QA, Simulation, Production) and lead on-call obligations for owned services, ensuring operational stability and timely resolution of incidents.
Required qualifications, capabilities, and skills
- Formal training or certification on software engineering concepts and 5+ years applied experience
- 8+ of experience years with expert level Java proficiency, including collections, concurrency, memory management, and performance tuning; experience with profiling tools. Able to walk through applied examples designing and operating distributed Java systems.
- Strong experience with Spring Boot and microservices; API focused event driven design and idempotency; schema evolution and compatibility.
- Expert-level experiencing designing and implementing Python-based microservices.
- Deep knowledge of resiliency engineering patterns and disaster recovery objectives (RTO/RPO) with hands on practice running DR tests and chaos/resilience exercises.
- Secure SDLC expertise: threat modeling, SAST/DAST integration, dependency risk/SBOM management, secrets handling, encryption standards, and robust authentication/authorization.
- Streaming and messaging: practical experience with Kafka (topic design, partitioning, consumer group scaling, transactional/exactly-once semantics) and other messaging platforms as required.
- Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
- Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices
- Observability: instrumentation of metrics/logs/traces, alerting design, runbooks, incident management, and postmortems.
- DevOps/SDLC: proficiency with build tools, CI/CD systems, and version control (Git) with automated pipeline governance.
- Cloud-hybrid delivery: containers and orchestration, infrastructure as code, multi-AZ/region architectures, and cost efficient scalability; hands on experience with AWS and awareness of other cloud providers.
- Ability to independently tackle complex design and functionality problems with minimal oversight; excellent technical communication and mentoring skills.
Preferred qualifications, capabilities, and skills
- Experience with service mesh, API gateways, and contract governance at scale.
- Familiarity with modern frontend technologies for internal tooling or dashboards.
- Proficiency in one or more additional programming languages (e.g., Python) for API delivery and management, tooling, automation, or data tasks as well as partnering with other delivery teams.
- Experience establishing engineering standards across multiple teams and leading technical working groups.
- Knowledge of UNIX/Linux and shell scripting for operational tooling and automation.
Leadership and collaboration expectations
- Act as a trusted technical leader across regions, influencing peers and decisionmakers to adopt leading edge technologies and best practices in resilience and security.
- Mentor engineers at multiple levels, elevate code quality and design rigor, and contribute to internal forums and tech talks to disseminate best practices.
- Build strong working relationships with platform partners across Product Development, Operations, Risk/Controls, and other firmwide functions to deliver competitive, scalable solutions.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
What JPMorgan Chase & Co. employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About JPMorgan Chase & Co
Sourced by ZipRecruiter
Industry
Finance and insurance and banking and credit intermediation
Company size
10,000+ Employees
Headquarters location
New York, NY, US