This listing doesn't post a salary. Most similar roles pay
$151,475–$216,062.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1058 open roles
on FindRole.
As a Senior Lead Security Engineer within Cybersecurity and Technology Controls, you will serve as a senior technical advisor to product, technology, and business stakeholders. You will evaluate the security of new features, platforms, applications, and third-party solutions by applying secure design principles, threat modeling, and risk-based decision-making to mitigate malicious behavior across modern environments. Your daily work involves conducting threat assessments, identifying cybersecurity risks, and recommending architectural changes during incidents or remediation phases. You will also integrate enterprise-authorized artificial intelligence capabilities into security architecture workflows and lead communities of practice. Required skills include expertise in threat modeling, vulnerability analysis, and risk evaluation within cloud platforms, APIs, identity management, and mobile infrastructure. You must possess deep knowledge of programming languages and tools to communicate complex technical risks and mitigation options to senior leadership.
Conduct and maintain threat models, assessments, and secure design reviews for enterprise applications and cloud platforms.
Provide technical guidance to product and engineering teams to ensure the secure design and delivery of new capabilities.
Identify and communicate cybersecurity risks along with specific mitigation options and recommended solutions to stakeholders.
Evaluate emerging technologies and third-party vendor solutions to ensure they align with security architecture and business goals.
Automate recurring security issues and improve the overall security posture of systems and technology processes.
Integrate enterprise-authorized artificial intelligence tools to accelerate security architecture, risk identification, and documentation workflows.
Drive the adoption of AI-assisted security validation within the software development life cycle and delivery toolchain.
Lead communities of practice to promote consistent cybersecurity technologies and secure design patterns across the organization.
What we're looking for
Formal training or certification in cybersecurity, security architecture, security engineering, or a related technical discipline, with 5+ years of applied experience.
Hands-on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies.
Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition.
Proficiency in modern technology environments including public cloud, APIs, IAM, AI/ML, mobile, infrastructure, or application security.
Deep expertise in one or more programming languages, platforms, cloud services, security tools, or application technologies to engage credibly with engineering teams.
Experience using enterprise-authorized artificial intelligence capabilities to support cybersecurity workflows with strong validation practices and data sensitivity awareness.
Strong written and verbal communication skills to explain complex technical risks and recommendations to senior business leaders and stakeholders.
Experience with cloud-native security, API security, identity federation, or Zero Trust patterns (preferred); familiarity with vulnerability management or penetration testing (preferred).