Sr. Lead Cybersecurity Architect - Product Security Lead
JPMorgan Chase5 hours ago
Base Salary
$176k - $260k/yr
Responsibilities
- Partner with engineering and architecture teams to integrate security controls into cloud platforms, frameworks, products, and infrastructure services.
- Create and propagate security design patterns for consistent and secure technology solutions.
- Guide engineering teams on secure development practices and embed security throughout the software development lifecycle.
- Conduct security assessments, threat modeling, risk assessments, and vulnerability assessments.
- Design secure code practices, perform code reviews, and help developers embed security into product design.
- Develop extensible security solutions aligned with product strategy and future developments.
- Drive security education and awareness across the organization.
- Provide security updates to senior management and stakeholders, translating technical risks into business impact.
- Improve product security policies, standards, guidelines, and continuous compliance controls.
- Monitor emerging security threats, vulnerabilities, technologies, trends, and best practices.
Requirements
- Formal security training or certification and 5+ years of experience in a product security role with a record of driving security initiatives.
- Strong knowledge of secure software development practices and common vulnerabilities, including the OWASP Top Ten.
- Experience with threat modeling, risk assessment, and vulnerability management.
- Programming proficiency in languages such as Java, Python, C, or C++.
- Familiarity with the NIST Cybersecurity Framework and regulations including GDPR and HIPAA.
- Ability to lead and collaborate effectively across cross-functional teams, with strong communication, interpersonal, problem-solving, and critical-thinking skills.
- Preferred security certifications include CISSP, CISM, and CCSP.
- Preferred cloud certifications include AWS Security Specialty and AWS Solutions Architect Associate or Professional.
- Experience with DevSecOps, continuous compliance controls, policy-as-code, guardrails, and automated evidence is preferred.
Benefits
- Competitive total rewards package with base salary determined by role, experience, skill set, and location; compensation details are provided during hiring.
- Eligible roles may receive commission-based pay or discretionary incentive compensation in cash or forfeitable equity.
- Benefits may include health care coverage, on-site health and wellness centers, retirement savings, backup childcare, tuition reimbursement, mental health support, financial coaching, and other programs.
- JPMorgan Chase is an equal opportunity employer and provides reasonable accommodations.
- Work arrangement and contract duration are not stated.
About JPMorgan Chase
JPMorgan Chase provides consumer and commercial banking, payments, credit card, wealth management, and corporate and investment banking services to individuals, businesses, institutions, and governments. The public company (NYSE: JPM) earns revenue from interest, fees, trading, and asset management across operations in more than 100 markets. Headquartered in New York City with roots dating to 1799, it serves retail customers and prominent corporate and government clients through brands including Chase and J.P. Morgan.