Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.
As a Senior Lead Cybersecurity Architect at JPMorganChase within the Employee Compute Security Architecture (ECSA) team, you are an integral part of a team that enables endpoint security product teams to deliver secure-by-default, resilient services at speed. Drive significant business impact by embedding clear security standards, consumable security services, and expert guidance into the delivery lifecycle across the endpoint security estate. Apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains, from endpoint and identity to collaboration, virtualization, and cloud-delivered workplace services.
Our mission is to drive enterprise risk reduction and operational resilience by standardizing secure baseline configurations, integrating proactive threat modeling and consultative reviews, and producing control artifacts that simplify compliance and accelerate time to value.
Job responsibilities
- Lead and own the evaluation of cybersecurity principles, processes, and controls across the endpoint security estate; drive technology assessments using established security standards and patterns, with the authority to influence peers and decision-makers to adopt leading-edge solutions.
- Define, publish, and maintain secure-by-default baseline configurations and consumable security services that endpoint security product teams can adopt directly within their delivery lifecycle.
- Conduct proactive threat modeling, security assessments, and technical risk assessments on design proposals from product and engineering teams, delivering consultative secure design reviews.
- Leverage enterprise-authorized AI and machine learning capabilities to improve the efficiency, throughput, and quality of cybersecurity architecture work — including accelerating risk analysis and decisioning, automating threat modeling and secure design reviews, and generating control artifacts — while validating outputs and handling data according to sensitivity and security requirements.
- Serve as a subject matter expert across ECSA and the broader cybersecurity organization, providing technical guidance and direction to technology teams, business partners, contractors, and vendors, and championing secure-by-design adoption at speed.
- Work with stakeholders and senior business leaders to recommend risk mitigations and business modifications during periods of elevated risk, open vulnerability windows, or active risk acceptance decisions, and translate regulatory requirements into actionable technical controls.
- Produce control artifacts and evidence that simplify compliance, streamline audits, and accelerate time to value for product teams.
- Actively contribute to the engineering community as an advocate for firmwide frameworks, tools, and practices of the Software Development Life Cycle, integrating security into CI/CD pipelines and DevSecOps workflows.
- Influence technology decisions by introducing improvements in implementation patterns and architectural design, and identify opportunities to eliminate or automate remediation of recurring issues.
- Manage concurrent architecture engagements — balancing priorities, deadlines, and deliverables across multiple product teams — to ensure timely security design input and implementation support.
- Add to team culture of diversity, equity, inclusion, and respect.
- Formal training or certification on cybersecurity architecture and 5+ years applied experience
- Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls, including threat modeling, threat assessments, and secure design reviews.
- Experience applying AI or machine learning tools to cybersecurity or technology workflows, with demonstrated ability to critically evaluate and validate AI-assisted outputs before adoption. Direct application within cybersecurity architecture workflows — such as AI-accelerated risk analysis, threat modeling, or control documentation — is strongly preferred and will characterize day-to-day work in this role.
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
- Proficiency in scripting and automation languages (e.g., Python, PowerShell, or Bash), with solid knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, endpoint, identity, AI/ML, or mobile).
- Experience securing endpoint or workplace-compute platforms (e.g., Windows/macOS, EDR, MDM, or virtualization); candidates are expected to bring demonstrated depth in at least one of these areas.
- Experience in infrastructure or systems administration — such as enterprise systems engineering, OS deployment and hardening, or platform operations — and the secure software development lifecycle, including familiarity with automation, continuous delivery, and security integration into CI/CD pipelines.
- Experience in security products, risk management, information security standards, security architecture principles, threat and vulnerability management, and incident response methodologies.
- Working knowledge of enterprise networking concepts and network security controls — including network segmentation, firewall policy, secure access patterns, and DNS/proxy architecture — sufficient to assess and advise on network-layer design decisions within endpoint and workplace environments.
- Understanding of enterprise Identity and Access Management concepts such as federated identity, SSO, OAuth/SAML, privileged access management, and RBAC.
- Experience designing security controls aligned to a comprehensive control catalog (e.g., NIST 800-53), including control scoping, design, and the production of control artifacts and evidence that support compliance and audit readiness.
- Ability to tackle design and functionality problems independently with little to no oversight.
- Ability to evaluate current and emerging technologies to select or recommend the best solutions for the future-state architecture.
- Excellent verbal and written communication skills, with the demonstrated ability to translate security concepts clearly for both technical and non-technical audiences — including executives, senior business leaders, and external partners.
- Industry certifications such as CISSP, CCSP, SABSA, or equivalent cybersecurity architecture credentials.
- Experience navigating cross-jurisdictional compliance complexity in a multi-national or global enterprise, including adapting security controls to meet region-specific regulatory requirements.
- Familiarity with financial services compliance frameworks beyond NIST 800-53, such as SOC 2, PCI-DSS, NIST CSF 2.0, or the NIST AI Risk Management Framework.
- Experience with zero-trust architecture principles and their practical application in hybrid or multi-cloud environments.
- Experience with AI governance practices, MLSecOps, or enterprise AI security policy — such as model risk management, AI supply-chain security, or AI-specific control frameworks.
- Experience securing AI/ML and agentic systems (e.g., threat modeling for prompt injection, data leakage, model extraction, and supply-chain exposure), and willingness to work on proofs of concept for new, innovative approaches.
- Experience providing technical mentorship, conducting architectural guidance sessions, or leading communities of practice within a security or engineering organization.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
Skills Required
- Formal training or certification in cybersecurity architecture
- At least 5 years of applied cybersecurity architecture experience
- Enterprise cybersecurity solutions and controls experience, including threat modeling, threat assessments, and secure design reviews
- Experience applying AI or machine learning tools to cybersecurity or technology workflows
- Ability to validate AI-assisted security recommendations and escalate uncertainty
- Proficiency in Python, PowerShell, Bash, or similar scripting and automation languages
- Cybersecurity architecture expertise in areas such as public cloud, endpoint, identity, AI/ML, or mobile
- Experience securing endpoint or workplace-compute platforms such as Windows, macOS, EDR, MDM, or virtualization
- Infrastructure or systems administration experience, including OS deployment, hardening, or platform operations
- Secure software development lifecycle, automation, continuous delivery, and CI/CD security integration experience
- Experience with security products, risk management, information security standards, security architecture, threat and vulnerability management, and incident response
- Working knowledge of enterprise networking and network security controls, including segmentation, firewalls, secure access, and DNS/proxy architecture
- Understanding of identity and access management, federated identity, SSO, OAuth, SAML, privileged access management, and RBAC
- Experience designing controls aligned with NIST 800-53 or a comparable control catalog
- Ability to work independently with little to no oversight
- Ability to evaluate emerging technologies and recommend future-state architecture solutions
- Excellent verbal and written communication skills for technical and non-technical audiences
- CISSP, CCSP, SABSA, or equivalent cybersecurity architecture certification
- Experience with cross-jurisdictional compliance in a multinational enterprise
- Familiarity with SOC 2, PCI-DSS, NIST CSF 2.0, or NIST AI Risk Management Framework
- Experience with zero-trust architecture in hybrid or multi-cloud environments
- Experience with AI governance, MLSecOps, or enterprise AI security policy
- Experience securing AI/ML and agentic systems
- Experience mentoring, conducting architecture guidance sessions, or leading security communities of practice
JPMorganChase Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about JPMorganChase and has not been reviewed or approved by JPMorganChase.
-
Healthcare Strength — Health coverage is considered comprehensive, including medical, dental, and vision, alongside wellness and mental health resources. Some locations add onsite health centers and related wellbeing support.
-
Retirement Support — Retirement offerings include a 401(k)-type savings plan and related financial benefits, with options such as employee stock purchase participation. Financial planning resources are also highlighted to support long-term savings.
-
Parental & Family Support — Paid parental leave of 16 weeks for birth or adoption is available for all parents. Child care and back-up child care resources further reinforce family support.
JPMorganChase Insights
What We Do
JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $3.7 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small businesses, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Technology fuels every aspect of our company and is at the heart of everything we do. With over 50,000 technologists globally and an annual tech spend of $12 billion, we are dedicated to improving the design, analytics, development, coding, testing and application programming that goes into creating high quality software and new products. Learn more about technology at our firm, explore resources from our Distinguished Engineers, AI & ML researchers, and other experts; access the latest episode of our TechTrends podcast, and more at www.jpmorgan.com/technology. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com. ©2023 JPMorgan Chase & Co. All rights reserved. JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.
Why Work With Us
Our technologists work on a diverse range of solutions that include strategic technology initiatives, big data, mobile, electronic payments, machine learning, cybersecurity, enterprise cloud development, and other state-of-the-art technologies.
Gallery
