Hiring Event - Security Architecture & Engineering - Sep 24-25th 2026

JPMorgan Chase & Co.; Jersey City (NJ); On-site; USD 150,000 - 210,000; Full time

Job summary

JPMorgan Chase & Co. seeks a Cybersecurity Architect/Engineer to shape secure software solutions and lead AI-enabled cybersecurity initiatives. You will architect scalable security frameworks for cloud and on-prem environments, drive risk mitigation, and mentor teams in SDLC best practices.

Responsibilities include designing secure production code, implementing IAM protocols, and guiding strategic decisions on target state architecture with cross-functional collaboration across the organization.

Qualifications

• Formal training or certification in software engineering/architecture with applied experience in system design, application development, and operational stability.
• Advanced proficiency in one or more languages: Java, Python, C/C++, Node, or Golang.
• Experience planning, designing, and implementing enterprise-level security solutions with fluent understanding of SDLC and agile methodologies.

Responsibilities

• Design, develop, and troubleshoot secure solutions and review code.
• Architect scalable cybersecurity frameworks for cloud and on-prem environments.
• Evolve security protocols by assessing controls and implementing improvements.

Skills

Java

Python

C/C++

Node

Golang

Education

Formal training in software engineering/architecture

Tools

Kubernetes

Terraform

CI/CD tooling

Job description

As a Cybersecurity Architect/Engineer , you play a pivotal role in shaping secure solutions for software applications and platform products, driving meaningful business impact through deep technical expertise and innovative problem-solving. You will leverage advanced architecture capabilities to identify, communicate, and mitigate risk while collaborating across the organization to drive best-in-class outcomes, and lead the creation of AI-enabled cybersecurity solutions and reusable frameworks at the forefront of industry best practices.

Job Responsibilities

• Design, develop, and troubleshoot creative security solutions, producing secure, high-quality production code and reviewing code. Architect complex, scalable, and reusable cybersecurity frameworks for cloud and on-premises environments, driving standardization and consistency across the organization

• Continuously evolve security protocols by assessing current controls, identifying gaps, and implementing improvements aligned with industry standards and governmental regulations

• Implement and manage IAM protocols (RBAC, OAuth2.0, SCIM, WebAuthN, OPA, PBAC) and apply advanced security principles including encryption, data security, and risk management. Lead cybersecurity strategy for AI-enabled products and drive adoption of new technical methods, including leading proof-of-concept initiatives for emerging technologies

• Translate complex technical issues to leadership, enabling strategic decisions about target state architecture

• Serve as a subject matter expert, providing technical guidance to stakeholders, business leaders, technical teams, contractors, and vendors

• Mentor engineering teams, advocate for firmwide SDLC best practices, and champion a culture of diversity, inclusion, and continuous learning.

• Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.

• Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.

Required Qualifications, Capabilities, and Skills

• Formal training or certification in software engineering/architecture with applied experience in system design, application development, and operational stability .Advanced proficiency in one or more languages: Java, Python, C/C++, Node, or Golang

• Experience planning, designing, and implementing enterprise-level security solutions with fluent understanding of SDLC and agile methodologies (CI/CD, Application Resiliency)

• Practical cybersecurity experience in one or more disciplines: AI/ML, Application Development, Cloud, Infrastructure, Mobile, Offensive Security, or Vulnerability Management

• Extensive cloud-native experience (AWS, Azure, GCP) including Kubernetes, Lambda, ECS, S3, Aurora, API Gateway, and DevOps practices

• Experience in security assessment, threat modeling, and secure design for cloud-native applications, including A2A security, certificate management, API security, and service mesh architectures

• Expertise in IAM principles (RBAC, OAuth2.0, SCIM, WebAuthN, OPA, PBAC) with deep understanding of encryption, data security, and risk management

• Experience with CIS Security baselines, configuration drift remediation, and hands‑on security architecture

• Proven experience building scalable microservices, enterprise-grade APIs, and high-availability database architectures (SQL, data modeling), with knowledge of streaming technologies (Kafka, RabbitMQ) .

• Strong cross-functional influence, technical thought leadership, and ability to communicate complex concepts to senior executives.

• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.

• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

Preferred Qualifications, Capabilities, and Skills

• Experience with threat modeling methodologies such as STRIDE, MITRE ATT&CK, VAST, DREAD, IriusRisk, and PASTA

• Experience with web, API, and microservices technologies including Web Applications, Web Services, and Service Oriented Architectures. Experience with Infrastructure as Code (IaC) utilizing tools such as Terraform

• Experience with cloud security platforms such as AWS, Azure, and Google Cloud. Familiarity with security frameworks such as NIST, ISO 27001, and SOC 2

• Proficiency in MCP and its application on how it can be used to secure agentic systems

• Experience with Vendor Product Management, Services, and Tooling

• Experience leading cross-functional security projects with strong communication and stakeholder management skills

• Strategic thinker with a proactive approach to problem-solving, strong organizational and project management skills, and a commitment to continuous learning and professional development
• Professional certifications such as CISSP, CISM, or CCSP . AWS certifications including Practitioner, Cloud Engineer, Software Development Engineer, Cloud Security Engineer, Cloud Security Architect, and Application Architect. Offensive Security certifications including OSCP, OSWP, OSCE, OSEE, OSWE, OSEP, and CEH