Senior Lead Cybersecurity Architect - Threat Modelling, Security Architecture and Design

JPMorgan Chase & Co.; Bengaluru; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

JPMorgan Chase & Co. seeks an experienced Senior Lead Cybersecurity Architect to shape threat modelling, security architecture, and design across multiple technology domains. You will influence peers, drive advanced security practices, and apply AI-powered risk analysis throughout the software development lifecycle.

The role requires leadership in cloud security, IAM, and secure software design, with a focus on resilient solutions in a fast-paced financial services environment.

Qualifications

• Formal training or certification on cybersecurity architecture.
• 5+ years of applied experience in enterprise cybersecurity.
• Experience delivering enterprise-level cybersecurity solutions and controls.
• Experience using AI capabilities in security workflows with data sensitivity awareness.
• Strong knowledge of cloud, AI/ML, and mobile domains.
• Ability to validate AI-assisted security recommendations and ensure security, resiliency & auditability.

Responsibilities

• Guide evaluation of current cybersecurity principles, processes, and controls.
• Lead assessment of new technology using standards and frameworks.
• Provide technical guidance to business and technical teams, contractors, and vendors.
• Work with stakeholders to recommend business modifications during vulnerabilities.
• Advocate SDLC security frameworks within the engineering community.
• Drive reuse of AI-assisted security validation within SDLC/toolchain routines.

Skills

Cybersecurity architecture

AI in security

Cloud platforms

Kubernetes

SDLC security

Threat modelling

Identity & Access Management

MITRE ATT&CK

Tools

AWS

GCP

Azure

Job description

Senior Lead Cybersecurity Architect - Threat Modelling, Security Architecture and Design

and 1 more

Job Information

• Job Identification 210793969
• Job Category Cybersecurity
• Business Unit Corporate Sector
• Posting Date 09/29/2026, 09:22 AM
• Locations Ground to Fifth Floor G,H Block, EMBASSYTECH VILLAGE-PARCEL 5 OUTER RING RD DEVERABEESANAHALLI VILLA, Bengaluru, IN-KA, 560103, IN VENTURA TOWERS,2ND3RD,4TH,5TH And 8TH, PART FLRS,HIRANANDANI BUSINESS , PARK,C.A.RD,POWAI, Mumbai, IN-MH, 400076, IN
• Apply Before 10/09/2026, 04:00 AM
• Job Schedule Full time
• Job Shift Day

Job Description

Join a dynamic team where your expertise shapes the future of an iconic company. Grow your career by making a direct impact in a high-achieving environment.

As a Senior Lead Cybersecurity Architect at JPMorgan Chase within the Cybersecurity & Technology Controls team, you are an integral part of a group that develops high-quality cybersecurity solutions for software applications and platform products. You drive significant business impact through your capabilities and contributions, applying deep technical expertise and problem-solving skills to tackle diverse cybersecurity challenges across multiple technology domains. We value your ability to influence, innovate, and collaborate in a fast-paced setting.

Job responsibilities

• Guide evaluation of current cybersecurity principles, processes, and controls, and lead assessment of new technology using existing standards and frameworks, influencing peers and decision-makers to adopt leading-edge solutions.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
• Provide technical guidance and direction to support business and technical teams, contractors, and vendors, serving as a subject matter expert in areas of focus.
• Work with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability.
• Advocate firm-wide frameworks, tools, and practices of the Software Development Life Cycle within the engineering community.
• Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing, remediation quality, and traceability/auditability in line with resiliency expectations.

Required qualifications, capabilities and skills

• Formal training or certification on cybersecurity architecture and 5+ years applied experience
• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Advanced expertise in programming languages and applications, with deep knowledge of cybersecurity architecture and technical processes across domains such as public cloud, AI/ML, and mobile.
• Ability to independently solve design and functionality problems, and evaluate emerging technologies to recommend optimal solutions for future state architecture.
• Professional experience with public and private cloud platforms (AWS, GCP, Azure), containerization and orchestration (Kubernetes), microservice architectures, and relevant cloud certifications (AWS Solutions Architect Associate/Professional, AWS Security Specialty, GCP/Azure equivalents).
• Experience in roles such as Security Architect, IT Risk Manager, DevOps/DevSecOps Engineer, or Cloud Security Engineer
• Strong understanding of secure software design principles, common attack patterns, OWASP top 10 risks, vulnerabilities, solutions, and frameworks.
• Expertise in Identity and Access Management for enterprise and hybrid environments, including SSO, OAuth, SAML, AD & ADFS, Privileged Access Management, RBAC, and knowledge of Threat Intelligence, APT groups, malware analysis, and MITRE ATT&CK framework.

Preferred qualifications, capabilities and skills

• Demonstrable experience in information security in operations, engineering, or architect roles preferably within regulated financial services environments.
• Knowledge in Agile and ability to work with at least one common framework
• Breadth of experience across domains such as enterprise security architecture, compute services, storage, networking, virtualization, data center, integration architecture (API), orchestration technologies (Openstack/Cisco), application development lifecycle management (DevOps, CI/CD), and service delivery
• Conduct manual, language-agnostic code review to identify security-related vulnerabilities