below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$154,900–$216,000.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1227 open roles
on FindRole.
Listed pay typically runs
$144,716–$200,000
across 12 roles with salary data.
JOB TITLE: Senior Lead Security Engineer
As a Senior Lead Security Engineer within Cybersecurity and Technology Controls, you will partner with product, technology, and business stakeholders to evaluate the security of new features, platforms, applications, and third-party solutions. You will apply secure design principles, threat modeling, and risk-based decision-making to reduce misuse and malicious behavior across modern technology environments. Your daily responsibilities include conducting threat assessments, providing technical guidance on secure delivery, and translating complex findings into mitigation options for senior stakeholders. You will utilize enterprise-authorized artificial intelligence to accelerate security architecture workflows and validation. Required skills include expertise in threat modeling, vulnerability analysis, and proficiency in public cloud, APIs, identity and access management, and mobile security. You must demonstrate deep expertise in programming languages and security tools to remediate vulnerabilities and design weaknesses.
Provide technical guidance to engineering and vendor teams to support the secure design and delivery of new capabilities.
Conduct threat models, threat assessments, and secure design reviews for enterprise applications, cloud platforms, and third-party solutions.
Identify and communicate cybersecurity risks, mitigation options, and compensating controls across various business functions.
Recommend design, implementation, or operational changes during periods of vulnerability, incident response, or emerging risk.
Evaluate emerging technologies and vendor offerings to ensure they fit within existing cybersecurity architecture and technical capabilities.
Identify opportunities to automate recurring security issues and improve the overall security posture of applications and systems.
Leverage enterprise-authorized artificial intelligence to accelerate security architecture workflows and risk identification.
Drive the adoption of AI-assisted security validation within the software development life cycle and delivery toolchain.
What we're looking for
Formal training or certification in cybersecurity, security architecture, security engineering, or a related technical discipline with 5+ years of applied experience.
Hands-on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies.
Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition.
Proficiency in modern technology environments such as public cloud, APIs, identity and access management, AI/ML, mobile, infrastructure, or application security.
Deep expertise in one or more programming languages, platforms, cloud services, security tools, or application technologies to review technical designs.
Experience partnering with product and technology teams to remediate vulnerabilities, incidents, control gaps, recurring issues, or design weaknesses.
Experience using enterprise-authorized artificial intelligence capabilities to support cybersecurity workflows with strong validation practices and data sensitivity awareness.
Strong written and verbal communication skills to explain complex technical risks and recommendations to senior business leaders and technical stakeholders.
Cybersecurity Architecture
AWS
Microsoft Azure
GCP
Microsoft 365
SaaS
AI
ML
LLM
Threat Modeling
STRIDE
NIST
MITRE ATT&CK
OWASP
zero-trust
Identity and Access Management
API Security
SDLC
OAuth
Microsoft Entra ID
Microsoft Defender