This listing doesn't post a salary. Most similar roles pay
$161,131–$213,406.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1098 open roles
on FindRole.
As a Sr. Lead Cybersecurity Architect - Product Security Lead, you will join the product security team to drive initiatives and integrate security controls into platforms across AWS and GCP public cloud environments. You will collaborate with cross-functional engineering and architecture teams to develop security design patterns, conduct threat modeling, and perform vulnerability assessments throughout the software development lifecycle. Your daily work involves guiding engineers in secure infrastructure service development, performing code reviews, and creating extensible security solutions aligned with product strategy. You must possess expertise in Java, Python, or C/C++ while navigating frameworks like NIST and regulations such as GDPR and HIPAA. The role requires a deep understanding of OWASP Top Ten vulnerabilities and DevSecOps practices to ensure consistent security standards are embedded into the design of all products and features.
Integrate security controls into cloud platforms and frameworks in partnership with Engineering and Architecture teams.
Develop and propagate security design patterns to ensure consistent and secure technology solutions.
Guide engineering teams in the secure development of infrastructure services and products.
Conduct threat modeling, vulnerability assessments, and risk prioritizations for products and features.
Perform code reviews and work with developers to implement secure coding practices.
Develop extensible security solutions aligned with long-term product strategies.
Drive organization-wide security education and awareness programs.
Translate technical security issues into business impact reports for senior management and stakeholders.
What we're looking for
Formal training or certification and 5+ years of experience in a product security role.
Strong knowledge of secure software development practices and common vulnerabilities like OWASP Top Ten.
Experience with threat modeling, risk assessment, and vulnerability management.
Proficiency in programming languages such as Java, Python, C/C++.
Familiarity with security frameworks (e.g., NIST) and industry regulations (e.g., GDPR, HIPAA).
Excellent leadership, communication, and interpersonal skills.
Security certifications like CISSP or CISM (preferred).
Cloud certifications such as AWS Solutions Architecture or Security Specialty (preferred); experience with DevSecOps and continuous compliance (preferred).
Zero Trust
VMware
Microsoft 365
Python
Perl
Shell
Splunk
IBM QRadar
Elastic
Linux
Windows
MacOS
NIST SP 800 53
RMF
IDS/IPS
API Security
Cross Domain Solutions
Container Security