Join a team where your expertise in cybersecurity architecture shapes the future of secure technology solutions. Grow your career by collaborating with top engineering, product, and business professionals.
As a Lead Cybersecurity Architect at JPMorgan Chase within the Cybersecurity and Technology Controls team, you will design and deliver high-quality cybersecurity solutions for software applications and platform products. You will partner with engineering, product, and business stakeholders to ensure solutions are secure by design, resilient, and aligned to regulatory and audit expectations. You will play a key role in supporting Chase UK and JPMorgan Personal Investing, contributing to a collaborative and innovative team culture. You will help drive impactful outcomes for the firm and its clients.
Job responsibilities - Perform secure design reviews and threat modeling with application teams to ensure products are secure by design.
- Demonstrate deep understanding of product strategy, roadmap, and key investment programs.
- Identify and learn unfamiliar technology components, capabilities, and business concepts, applying critical thinking to uncover hidden issues.
- Share best practices and serve as the point of escalation and subject matter expert for Cybersecurity and Technology Controls.
- Collaborate with product, technology, and business colleagues for audit, regulatory, risk, and project initiatives.
- Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.
- Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.
Required qualifications, capabilities and skills - Advanced knowledge of cybersecurity architecture, applications, and technical processes with considerable, in-depth knowledge in one or more technical disciplines
- Ability to design and implement effective cybersecurity and technology controls
- Subject matter expert-level knowledge of Google Cloud Platform, Azure, and/or AWS with how controls are applied to secure data and maintain availability.
- Good knowledge of cloud services such as PaaS, IaaS, and SaaS and Kubernetes solutions (e.g., Anthos, AKS, EKS, etc.).
- Experience with cloud security posture management and cybersecurity vulnerability management.
- Strong knowledge of security best practices and DevSecOps methodologies.
- Good understanding of network security, network design, firewalls, etc.
- Experience with API authorization and authentication implementation and best practices.
- Strong written and verbal communication skills
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
Preferred qualifications, capabilities and skills - Experience with identity federation, least privilege, RBAC/ABAC concepts
- Experience with cloud security technologies and emerging security trends
