Senior Lead Security Engineer
JPMorgan Chase7 days ago
Responsibilities
- Provide technical guidance to product, engineering, business, contractor, and vendor teams on secure design and delivery.
- Conduct threat models, threat assessments, and secure design reviews for applications, cloud platforms, APIs, integrations, and third-party solutions.
- Identify and communicate cybersecurity risks, mitigation options, compensating controls, and recommended solutions.
- Advise stakeholders and senior leaders on design, implementation, and operational changes during vulnerabilities, incidents, remediation, and emerging risks.
- Evaluate internal platforms, vendor offerings, emerging technologies, and security designs against architecture, business, resiliency, and risk requirements.
- Identify opportunities to eliminate, reduce, or automate recurring security issues and improve security posture.
- Use authorized AI capabilities to support risk identification, threat assessment synthesis, documentation, decision support, and security validation.
- Drive reuse-first adoption of AI-assisted security validation within the software development lifecycle and delivery toolchain.
- Lead or contribute to cybersecurity communities of practice, secure design initiatives, and risk management forums.
Requirements
- Formal training or certification in cybersecurity, security architecture, security engineering, or a related technical discipline, plus 5+ years of applied experience.
- Hands-on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies.
- Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition.
- Proficiency in one or more modern technology disciplines such as public cloud, APIs, identity and access management, AI and machine learning, mobile, infrastructure, or application security.
- Ability to evaluate technologies and recommend practical security solutions aligned with target architecture, business priorities, resiliency expectations, and risk appetite.
- Deep expertise in at least one programming language, platform, cloud service, security tool, or application technology, with the ability to review technical designs.
- Experience partnering with product and technology teams to remediate vulnerabilities, incidents, control gaps, recurring issues, or design weaknesses.
- Experience using authorized AI capabilities in cybersecurity workflows with strong validation and data-sensitivity practices.
- Strong written and verbal communication skills for explaining technical risks, trade-offs, and recommendations to senior leaders and technical stakeholders.
- Preferred experience with cloud-native security architecture, API security, identity federation, OAuth, SAML, secrets management, service-to-service authentication, or Zero Trust patterns.
- Preferred familiarity with vulnerability management, penetration testing outputs, security testing methodologies, incident remediation, and secure-by-design practices.
- Preferred experience evaluating third-party solutions, SaaS platforms, integrations, and emerging technologies from a cybersecurity architecture and risk perspective.
- Preferred knowledge of Security Service Edge, Cloud Access Security Broker, Security Information and Event Management, API gateways, proxy technologies, traffic inspection, or security monitoring platforms.
- Preferred experience leading cross-functional security reviews, architecture governance discussions, design forums, or communities of practice.
Benefits
- Competitive total rewards package with base salary determined by role, experience, skill set, and location; eligible roles may also receive incentive compensation.
- Comprehensive health care coverage and on-site health and wellness centers.
- Retirement savings plan and backup childcare.
- Tuition reimbursement, mental health support, and financial coaching.
- Additional benefits and total compensation details are provided during the hiring process.
Categories
About JPMorgan Chase
With a history tracing its roots to 1799 in New York City, JPMorganChase is one of the world's oldest, largest, and best-known financial institutions—carrying forth the innovative spirit of our heritage firms in global operations across 100 markets. We serve millions of customers and many of the world’s most prominent corporate, institutional, and government clients daily, managing assets and investments, offering business advice and strategies, and providing innovative banking solutions and services. Social Media Terms and Conditions: https://bit.ly/JPMCSocialTerms JPMorgan Chase & Co. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.