Join a team where your expertise in cybersecurity architecture shapes the future of secure technology solutions. Grow your career by collaborating with top engineering, product, and business professionals.
As a Lead Cybersecurity Architect at JPMorgan Chase within the Cybersecurity and Technology Controls team, you will design and deliver high-quality cybersecurity solutions for software applications and platform products. You will partner with engineering, product, and business stakeholders to ensure solutions are secure by design, resilient, and aligned to regulatory and audit expectations. You will play a key role in supporting Chase UK and JPMorgan Personal Investing, contributing to a collaborative and innovative team culture. You will help drive impactful outcomes for the firm and its clients.
Job responsibilities
- Perform secure design reviews and threat modeling with application teams to ensure products are secure by design.
- Demonstrate deep understanding of product strategy, roadmap, and key investment programs.
- Identify and learn unfamiliar technology components, capabilities, and business concepts, applying critical thinking to uncover hidden issues.
- Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.
- Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.
- Share best practices and serve as the point of escalation and subject matter expert for Cybersecurity and Technology Controls.
- Collaborate with product, technology, and business colleagues for audit, regulatory, risk, and project initiatives.
- Work with Third Party Oversight teams to manage technology risk for vendors, focusing on cloud computing and emerging technologies.
Required qualifications, capabilities and skills
- Formal training or certification on security engineering concepts and 5+ years applied experience
- Advanced knowledge of cybersecurity architecture, applications, and technical processes with expertise in one or more technical disciplines
- Ability to design and implement effective cybersecurity and technology controls
- Strong knowledge of security best practices and DevSecOps methodologies
- Experience with cloud security posture management and vulnerability management
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
- Understanding of network security, network design, segmentation, firewalls, and cloud networking patterns
- Experience implementing and reviewing authentication and authorization controls and best practices
- Hands-on experience in software development with strong understanding of SDLC and secure SDLC practices
- Knowledge of modern application architectures including microservices, APIs, and event-driven patterns
Preferred qualifications, capabilities and skills
- Experience with identity federation, least privilege, RBAC/ABAC concepts
- Experience with cloud security technologies and emerging security trends
- Ability to influence and partner across product supply chains
- Experience working with Third Party Oversight teams and managing vendor technology risk
Skills Required
- Formal training or certification on security engineering concepts and 5+ years applied experience
- Advanced knowledge of cybersecurity architecture, applications, and technical processes with expertise in one or more technical disciplines
- Ability to design and implement effective cybersecurity and technology controls
- Strong knowledge of security best practices and DevSecOps methodologies
- Experience with cloud security posture management and vulnerability management
- Demonstrated experience using enterprise-authorized AI capabilities to support cybersecurity architecture workflows with strong validation habits and data sensitivity awareness
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring auditability and resiliency
- Understanding of network security, network design, segmentation, firewalls, and cloud networking patterns
- Experience implementing and reviewing authentication and authorization controls and best practices
- Hands-on experience in software development with strong understanding of SDLC and secure SDLC practices
- Knowledge of modern application architectures including microservices, APIs, and event-driven patterns
- Experience with identity federation, least privilege, RBAC/ABAC concepts
- Experience with cloud security technologies and emerging security trends
- Ability to influence and partner across product supply chains
- Experience working with Third Party Oversight teams and managing vendor technology risk
JPMorganChase Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about JPMorganChase and has not been reviewed or approved by JPMorganChase.
-
Healthcare Strength — Medical, dental, vision, and mental-health coverage are broad, with wellness incentives, on-site or virtual care, and an EAP offering coaching and counseling. Plan materials emphasize accessible options, including multiple medical choices and tools to manage costs.
-
Parental & Family Support — Paid parental leave extends up to 16 weeks for all parents, supplemented by paid Critical Caregiver Leave. Family resources include backup childcare via Bright Horizons, lactation support and milk-shipping, family-building assistance, and even a free five-month SNOO rental for newborns.
-
Retirement Support — Retirement programs include a 401(k) with an annual company match and automatic pay credits for most employees, with a legacy pension available to earlier hires. An Employee Stock Purchase Plan at a 5% discount further supports long-term savings.
JPMorganChase Insights
What We Do
JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $3.7 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small businesses, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Technology fuels every aspect of our company and is at the heart of everything we do. With over 50,000 technologists globally and an annual tech spend of $12 billion, we are dedicated to improving the design, analytics, development, coding, testing and application programming that goes into creating high quality software and new products. Learn more about technology at our firm, explore resources from our Distinguished Engineers, AI & ML researchers, and other experts; access the latest episode of our TechTrends podcast, and more at www.jpmorgan.com/technology. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com. ©2023 JPMorgan Chase & Co. All rights reserved. JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.
Why Work With Us
Our technologists work on a diverse range of solutions that include strategic technology initiatives, big data, mobile, electronic payments, machine learning, cybersecurity, enterprise cloud development, and other state-of-the-art technologies.
Gallery
