Senior Lead Security Engineer
JPMorgan Chase2 days ago
Base Salary
$176k - $260k/yr
Responsibilities
- Provide technical guidance to product, engineering, business, contractor, and vendor teams on secure design and delivery.
- Conduct threat models, threat assessments, and secure design reviews for applications, cloud platforms, APIs, integrations, and third-party solutions.
- Identify and communicate cybersecurity risks, mitigation options, compensating controls, and recommended solutions.
- Advise stakeholders and senior business leaders on design, implementation, and operational changes during vulnerabilities, incidents, remediation, and emerging risks.
- Evaluate internal platforms, emerging technologies, and vendor offerings for security design, technical capability, architectural fit, and risk.
- Identify opportunities to reduce or automate recurring security issues and improve application, system, and process security posture.
- Use and validate enterprise-authorized AI capabilities for risk identification, threat assessment synthesis, documentation, decision support, and security validation.
- Lead or contribute to cybersecurity communities of practice and promote secure design patterns and risk management practices.
Requirements
- Formal training or certification in cybersecurity, security architecture, security engineering, or a related technical discipline, with 5+ years of applied experience.
- Hands-on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies.
- Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition.
- Proficiency across one or more areas such as public cloud, APIs, identity and access management, AI and machine learning, mobile, infrastructure, or application security.
- Ability to evaluate technologies and recommend practical solutions aligned with architecture, business priorities, resiliency expectations, and risk appetite.
- Deep expertise in one or more programming languages, platforms, cloud services, security tools, or application technologies, with the ability to review technical designs.
- Experience partnering with product and technology teams to remediate vulnerabilities, incidents, control gaps, recurring issues, or design weaknesses.
- Experience using enterprise-authorized AI capabilities in cybersecurity workflows with strong validation and data-sensitivity practices.
- Strong written and verbal communication skills for explaining technical risks, trade-offs, and recommendations to senior leaders and technical stakeholders.
- Preferred experience with cloud-native security architecture, API security, identity federation, OAuth, SAML, secrets management, service-to-service authentication, or Zero Trust patterns.
- Preferred familiarity with vulnerability management, penetration testing outputs, security testing methodologies, incident remediation, or secure-by-design practices.
- Preferred experience evaluating third-party vendors, SaaS platforms, integrations, and emerging technologies from a cybersecurity architecture and risk perspective.
- Preferred knowledge of Security Service Edge, Cloud Access Security Broker, Security Information and Event Management, API gateways, proxy technologies, traffic inspection, or security monitoring platforms.
- Preferred experience leading cross-functional security reviews, architecture governance discussions, design forums, or communities of practice.
Benefits
- Competitive total rewards package with base salary determined by role, experience, skill set, and location; eligible roles may also receive incentive compensation.
- Comprehensive health care coverage and on-site health and wellness centers.
- Retirement savings plan and backup childcare.
- Tuition reimbursement, mental health support, and financial coaching.
- Benefits and programs are eligibility-based, with additional compensation and benefits details provided during hiring.
Categories
About JPMorgan Chase
JPMorgan Chase provides consumer and commercial banking, payments, credit card, wealth management, and corporate and investment banking services to individuals, businesses, institutions, and governments. The public company (NYSE: JPM) earns revenue from interest, fees, trading, and asset management across operations in more than 100 markets. Headquartered in New York City with roots dating to 1799, it serves retail customers and prominent corporate and government clients through brands including Chase and J.P. Morgan.