Job Description
As a Threat Modeling Solutions Security Architect, you will be the go-to subject matter expert with regards to how the Threat Modeling Platform works and be responsible for teaching how to use the threat modeling solution with our standardized threat modeling methodology. You will join an experienced team of security architecture specialists that have been tasked with performing threat modeling, security architecture review assessment and proposing technical controls of firm's critical infrastructure to ensure that they are highly resilient to threats (internal and external).
This is a security architecture role, and the ideal candidate works with the security architecture and product engineering teams in architecting and building a highly scalable threat model platform that is tailored to reflect the firm's threat modeling methodology and processes. They should be able to effectively balance workload, work effectively and closely with the regional/global stakeholders, as well as engineering solutions for the Security Architecture team through automation, product customizations and enhancements.
Specific Responsibilities:

• Be innovative and make an impact: on your customers, on the team, and the firm.
• Collaborate with key stakeholders of the Threat Modeling Center of Excellence (TMCoE) by providing training sessions and workshops, working with the TMCoE Threat Modeling Researcher who will be responsible for researching new threat modeling trends, building content for the Threat Modeling (TM) platform, threat libraries to mapping threats with requirements or countermeasures.
• Contribute to and create content to help our customers get more out of Threat Modeling platform.
• Demonstrate subject matter expertise, using users experience data as a key input.
• Design, create and implement TM product customizations to align product with firms' threat model methodology by working along with Product Engineer and In-House Security Architecture specialists.
• Develop, maintain, update, enhance secure design patterns and secure coding standards, and integrate the current threat modeling process into the Threat Modeling Platform.
• Import Threats from Third Party RESTFUL API and architect highly scalable risk libraries.
• Mentor and support less experienced resources through knowledge transfer and training as needed.
• Play a critical role in influencing the Threat Model product vision and roadmap in-order to elevate business outcomes and build scalable, efficient and fault resistant automation solutions.
• Respond to technical inquiries internally about the platform.
• Work along with Security Architecture Team and identify requirements for Automation. Build Solutions to improve the process and turnaround time for execution of Threat Model and Architecture Risk & Security Assessments.

Minimum Qualifications:

• Expert level experience with atleast one Threat Modeling tool is highly preferred.
• Solid Experience in Java, React, Python etc.
• Solid Experience in Microservices Architecture, Multi-Cloud (AWS, GCP, Azure), OAuth etc.
• Experience in Working with API RESTful Services.
• Nice to Have: Generic Drawing file formats: Draw.io, Visio.
• Basic knowledge of threat modeling practices and security architecture reviews.
• Good to have hands-on experience in building prototypes or full products in hybrid environments.
• Strategic thinking and passion for business strategy, business processes and Strong English written and verbal communication skills.

The ideal candidate for this role is:

• A confident presenter who loves teaching an audience about new concepts and building relationships.
• A good listener who asks the right questions, someone who enjoys conversing with customers to establish what they are trying to achieve and gathering feedback to share with our Product and Engineering teams.
• A real problem solver and good with people type of person.
• A tech-obsessed individual who loves dealing with new technologies and is comfortable in learning new concepts, as well as sharing them with internal and external stakeholders.
• Experience in cyber security and threat modeling is a strong advantage.
• Experience working with a highly technical stakeholders base and understanding corporate IT projects and processes, as well as understanding the structure/mapping of corporate contact hierarchies.
• Interest in secure software development and working with developers (these are many of our stakeholders within customer accounts)
• Strong willingness to learn and ability to translate technical requirements to the business.

About Us
JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. In accordance with applicable law, we make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as any mental health or physical disability needs.
The health and safety of our colleagues, candidates, clients and communities has been a top priority in light of the COVID-19 pandemic. JPMorgan Chase was awarded the "WELL Health-Safety Rating" for all of our 6,200 locations globally based on our operational policies, maintenance protocols, stakeholder engagement and emergency plans to address a post-COVID-19 environment.
As a part of our commitment to health and safety, we have implemented various COVID-related health and safety requirements for our workforce. Employees are expected to follow the Firm's current COVID-19 or other infectious disease health and safety requirements, including local requirements. Requirements include sharing information including your vaccine card in the firm's vaccine record tool, and may include mask wearing. Requirements may change in the future with the evolving public health landscape. JPMorgan Chase will consider accommodation requests as required by applicable law.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set, and location. For those in eligible roles, discretionary incentive compensation which may be awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
Equal Opportunity Employer/Disability/Veterans
About the Team
The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm's cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group's number one priority is to enable the business by keeping the firm safe, stable and resilient.
High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.