Lead Cybersecurity Engineer

Join one of the world's most influential companies and leverage your skills in cybersecurity to have a real impact on the financial industry.

As a Lead Cybersecurity Architect at JPMorgan Chase within the Cybersecurity & Technology Controls, you play a crucial role in developing top-tier cybersecurity solutions for diverse software applications utilizing modern cloud-based technologies. As a key technical contributor, your responsibilities include implementing essential cybersecurity architecture solutions by identifying risks, creating mitigation strategies, and communicating solutions across various technical domains within different business functions to support project objectives.

Job responsibilities

• Formal training or certification on cybersecurity architecture concepts and proficient advanced experience
• Contribute to the maturity of mobile and web application security reviews activities across consumer banking products and provide thought leadership and guidance to peers and senior management.
• Build automation (static and dynamic analysis) and frameworks with software engineers that are able to improve security, whilst also improving developer and customer experience.
• Provide guidance and education to developers that help prevent the authoring of vulnerabilities.
• Provide challenge and assessment of potential technology risks including information and cyber security control weaknesses by performing threat modelling exercises. Provide technology risk subject matter expertise and communicate the risk environment to management and other key stakeholders.
• Build solid professional relationships with matrixed teams to include technology, business, audit, and operational risk partners.

• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls
• Bachelor's degree or the equivalent combination of education and relevant experience
• 8+ years of total relevant work experience
• Familiarity with mobile and web application programming languages, development practices, and common bug patterns (React Native, Java, Kotlin, Swift)
• Proficiency in automation and continuous delivery methods
• Proficiency in all aspects of the Software Development Life Cycle
• Advanced understanding of agile methodologies such as continuous integration and delivery, application resiliency, and security
• Practical cloud native experience
• Deep knowledge of one or more software and applications
• Ability to evaluate current and emerging technologies to recommend the best solutions for the future state architecture
• Experience effectively communicating with senior business leaders

• Knowledge of penetration testing techniques with the mobile application and web contexts
• Experience with IT risk management operating models, three lines-of-defense frameworks, integrated risk management practices, and/or risk intelligence capabilities
• Experience operating within a regulated industry