Lead Security Engineer - Cloud Threat Hunting (Cybersecurity & Technology Controls)

Archer; Columbus (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Archer, collaborating with JPMorgan Chase, seeks a senior cloud security professional to advance secure-by-design cloud architectures. You will lead threat hunts, construct detections, and drive risk-based security assessments for multi-cloud environments.

Applicants should bring 5+ years in cybersecurity, strong cloud platform expertise (AWS/Azure/GCP), and experience with IaC security and CSPM tooling. This role emphasizes cross-functional collaboration and scalable security controls.

Qualifications

• Formal cybersecurity training with 5+ years of applied experience.
• Hands-on cloud security across major platforms (AWS/Azure/GCP) and relevant certs.
• Experience with threat modeling and risk-based security assessments.
• Experience with cloud security posture management tooling (Wiz/Prisma/CrowdStrike).
• Knowledge of IaC (Terraform/CloudFormation) and security implications.
• Ability to lead cross-functional initiatives without direct authority.
• Strong risk-based prioritization and decision-making.

Responsibilities

• Partner with product, engineering, and risk teams to translate firm control requirements into secure cloud designs.
• Plan and execute cloud-focused threat hunts; translate findings into detections and controls.
• Query, analyze, correlate large data sets to identify threats and risk patterns.
• Deliver threat models and risk assessments for cloud services and apps.
• Review infrastructure-as-code for security alignment with standards.
• Develop preventive and detective controls for enterprise-scale cloud environments.
• Interface with security operations, threat intelligence, and incident response teams.

Skills

Security certifications

Cloud security

Threat modeling

IaC security

Cloud platforms

Leadership without authority

Risk-based decision making

Creative problem solving

Education

Cybersecurity certifications (e.g., CISSP, CCSP)

Tools

Wiz

Prisma Cloud

CrowdStrike Falcon

Terraform

CloudFormation

Job description

Archer is collaborating with J.P. Morgan to connect them with exceptional professionals for this role.

Job Description

JPMorganChase is one of the world's leading financial services firms, with assets exceeding ＄2 trillion and operations spanning more than 60 countries. We are a global leader in investment banking, consumer and commercial banking, financial transaction processing, and asset management. At JPMorganChase, technology and security aren't just support functions — they are core to how we serve clients, protect the firm, and drive innovation at scale.

Job Responsibilities

• Partner with stakeholders across product, engineering, and risk and controls teams to understand firm control requirements, recommend implementations across a broad range of cloud architectures, and ensure secure-by-design principles are embedded throughout
• Develop, plan, and execute hypothesis-driven, cloud-focused threat hunts, translating findings into actionable security outcomes including detection rules, alert tuning, and compensating controls
• Apply specialized tooling to query, analyze, correlate, and interpret large datasets to identify potential threats and emerging risk patterns
• Deliver threat models and risk-based assessments of cloud services, cloud platforms, and cloud-based applications to inform architecture and engineering decisions
• Perform security reviews of infrastructure-as-code for cloud platform development, ensuring alignment with firm standards and industry best practices
• Develop preventive and detective controls to enforce control requirements across cloud environments at enterprise scale
• Interface with broader cybersecurity teams to ensure platform integration with security operations, threat intelligence, and incident response — operationalizing detections, improving triage playbooks, and supporting cloud threat investigations
• Provide expert guidance on the cloud threat landscape, adversary tradecraft, and emerging risks to inform strategic security decisions
• Contribute to documentation and agile processes in support of security programs, driving consistency and repeatability across the team

Required Qualifications, Capabilities, And Skills

• Formal training or certification on cybersecurity concepts and 5+ years applied experience (e.g., Security+, CEH, CCSP, CISSP, or equivalent)
• Hands-on cloud-native experience across one or more major cloud platforms (AWS, Azure, or Google Cloud), including relevant cloud security certification
• Demonstrated experience with threat modeling methodologies and delivering risk-based security assessments
• Experience with cloud security posture management tooling (e.g., Wiz, Prisma Cloud, CrowdStrike Falcon, or equivalent)
• Knowledge of infrastructure-as-code frameworks (e.g., Terraform, CloudFormation, or equivalent) and their security implications
• Ability to lead cross-functional security initiatives and drive outcomes without direct authority
• Strong prioritization skills with a risk-based approach to decision-making across competing demands
• Ability to think beyond conventional approaches to build innovative solutions and break down complex technical problems

Preferred Qualifications, Capabilities, And Skills

• Experience in offensive security disciplines including penetration testing, red teaming, or purple teaming
• Proficiency with at least one query language used for threat detection and hunting (e.g., KQL, Splunk SPL, or SQL), with comfort working across large and complex datasets
• Experience working within agile delivery frameworks and contributing to security program documentation at an enterprise level

About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.