Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.
As a Sr Lead Cybersecurity Architect at JPMorganChase within Cybersecurity and Technology Controls, you are an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications and platform products. Drive significant business impact through your capabilities and contributions, and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.
Job responsibilities
- Guide evaluation of current cybersecurity principles, processes, and controls, and lead evaluation of new technology using existing standards and frameworks, influencing peers and decision-makers to adopt leading-edge solutions where appropriate
- Leverage enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements
- Provide technical guidance and direction to support the business and its technical teams, contractors, and vendors, serving as a function-wide subject matter expert in one or more areas of focus
- Partner with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability
- Contribute actively to the engineering community as an advocate of firm-wide frameworks, tools, and practices of the software development lifecycle
- Drive reuse-first adoption of AI-assisted security validation within software development lifecycle and toolchain routines, improving control testing, remediation quality, and traceability and auditability in line with resiliency expectations
Required qualifications, capabilities, and skills
- Formal training or certification on cybersecurity architecture concepts and 5+ years applied experience
- Hands-on experience conducting threat modeling, attack-surface analysis, or security architecture assessments
- Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations
- Advanced expertise in one or more programming languages and/or applications, with advanced knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, AI/ML, mobile)
- Ability to tackle design and functionality problems independently with little to no oversight
- Ability to evaluate current and emerging technologies to select or recommend the best solutions for future-state architecture
- Experience effectively communicating complex security concepts to senior business leaders and non-technical stakeholders
Preferred qualifications, capabilities, and skills
- Experience securing enterprise cloud and software-as-a-service environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services
- Security architecture experience across major cloud platforms, including AWS, GCP, and Microsoft Azure, with an understanding of cloud-native security controls and shared responsibility models
- Experience evaluating software-as-a-service integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective
- Experience securing AI/ML and large language model-enabled applications, agents, and emerging AI capabilities, including risks associated with data access, permissions, external integrations, and third-party model dependencies
- Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and software-as-a-service technologies
- Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles
#CTC