Software Engineer III - DevSecOps / Compliance Platform Engineering

As a Software Engineer III in the International Consumer Bank, you will strengthen the Chase UK cloud platform by embedding security into development and operations. You’ll build guardrails, tooling, and automation to provide continuous security visibility across AWS, partnering with platform teams, risk, and governance functions. Your work supports scalable, compliant cloud-native solutions that protect customers and enable rapid, secure delivery. This role offers hands-on risk-focused engineering that shapes secure, trusted digital banking capabilities.

• Perform threat modelling of platform services and cloud infrastructure and translate findings into remediation guidance
• Design and implement cloud security guardrails and policy-as-code controls for secure configuration at scale
• Develop automation to detect, enrich, and report security findings and compliance posture across AWS
• Assess and prioritize vulnerability findings with contextual analysis for engineering teams
• Contribute to software supply chain security practices including dependency analysis and policy enforcement
• Support audit evidence collection, reporting, and policy adherence with risk, governance, and control teams
• Maintain runtime security tooling for production risk visibility and contribute to incident response activities
• Leverage enterprise-authorized AI coding assist tools to improve code quality while ensuring secure coding standards
• Apply SDLC tooling knowledge, including AI-assisted development, to enhance automation value

• Formal training or certification on software engineering concepts and hands-on experience
• Hands-on experience in DevSecOps, cloud security, or compliance platform engineering in AWS
• Practical threat modelling experience applied to cloud services or distributed systems
• Working knowledge of AWS security services (IAM, CloudTrail, GuardDuty, Security Hub, KMS)
• Experience building security automation using Python, Go, or Bash
• Knowledge of infrastructure-as-code with Terraform
• Hands-on experience with Kubernetes in production
• Experience with financial services compliance frameworks (PCI-DSS, ISO 27001, or NIST)
• Experience with AI-assisted software development tools and evaluating AI outputs
• Understanding of responsible AI use in engineering workflows

• Collaboration with cross-functional teams
• Analytical thinking and risk-based decision making
• Effective communication for remediation guidance
• threat modelling (STRIDE or equivalent)
• AWS security services (IAM, CloudTrail, GuardDuty, Security Hub, KMS)
• Python, Go, or Bash scripting