Senior Lead Security Engineer

Next Frontier Capital; New York (NY); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Comprehensive health care coverage

On‑site health and wellness centers

Retirement savings plan

Tuition reimbursement

Mental health support

Job summary

JPMorganChase is seeking a Senior Lead Security Engineer to partner with product, technology, and business teams to assess security of new features, platforms, and third‑party solutions. You will translate complex findings into practical mitigations and risk narratives for senior stakeholders.

You will lead threat modeling, secure design reviews, and risk assessments across cloud, APIs, IAM, and AI/ML initiatives, while driving secure design and architecture improvements in enterprise

Qualifications

• Formal training or certification in cybersecurity, security architecture, security engineering, or a related technical discipline, with 5+ years of applied experience
• Hands‑on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies
• Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition
• Proficiency in modern technology environments across one or more disciplines such as public cloud, APIs, IAM, AI/ML, mobile, infrastructure, or application security
• Ability to evaluate technologies and recommend practical security solutions aligned to target architecture, priorities, resiliency, and risk appetite

Responsibilities

• Provide technical guidance and direction to product, engineering, business, contractor, and vendor teams to support secure design and delivery of new capabilities
• Conduct and maintain threat models, threat assessments, and secure design reviews for enterprise applications, cloud platforms, APIs, integrations, and third‑party vendor solutions
• Identify, document, and communicate cybersecurity risks, mitigation options, compensating controls, and recommended solutions across multiple technical areas
• Partner with stakeholders and senior leaders to recommend design, implementation, or operational changes during vulnerability periods, incidents, or risk
• Evaluate current and emerging technologies through outcomes‑oriented review of security designs, capabilities, and fit within cybersecurity architecture
• Identify opportunities to eliminate or reduce recurring security issues and improve overall security posture of applications and processes
• Leverage enterprise‑authorized AI capabilities to accelerate security workflows while validating outputs and handling data securely
• Drive reuse‑first adoption of AI‑assisted security validation within SDLC and delivery toolchain to improve testing, remediation, traceability, and resiliency
• Lead or contribute to communities of practice that promote awareness, consistency, and adoption of cybersecurity technologies and risk management

Skills

Threat modeling

Cloud security

Secure design reviews

Risk assessment

Security architectures

Education

Cybersecurity certification or degree

Bachelor's degree in a related field

Tools

Cloud platforms (AWS/Azure/GCP)

IAM & identity management

SIEM / monitoring tools

Job description

Join one of the world’s most influential companies and leverage your cybersecurity expertise to make a direct and meaningful impact across the financial industry.

As a Senior Lead Security Engineer at JPMorganChase within Cybersecurity and Technology Controls, you will partner with product, technology, and business stakeholders to evaluate the security of new features, platforms, applications, and third‑party solutions. You will apply secure design principles, threat modeling, and risk‑based decision‑making to reduce misuse, circumvention, and malicious behavior across modern technology environments. You will serve as a senior technical advisor, translating complex findings into clear mitigation options, architecture recommendations, and risk narratives for senior stakeholders.

Job responsibilities

• Provide technical guidance and direction to product, engineering, business, contractor, and vendor teams to support secure design and delivery of new capabilities
• Conduct and maintain threat models, threat assessments, and secure design reviews for enterprise applications, cloud platforms, application programming interfaces, integrations, and third‑party vendor solutions
• Identify, document, and communicate cybersecurity risks, mitigation options, compensating controls, and recommended solutions across multiple technical areas and business functions
• Partner with stakeholders and senior business leaders to recommend design, implementation, or operational changes during periods of vulnerability, incident response, remediation, or emerging risk
• Evaluate current and emerging technologies, including external vendor offerings and internal platforms, through outcomes‑oriented review of security designs, technical capabilities, and fit within existing systems and cybersecurity architecture
• Identify opportunities to eliminate, reduce, or automate recurring security issues and improve the overall security posture of applications, systems, and technology processes
• Leverage enterprise‑authorized artificial intelligence capabilities to accelerate security architecture and engineering workflows (for example, risk identification, threat assessment synthesis, documentation, and decision support), while validating outputs and handling data according to sensitivity and security requirements
• Drive reuse‑first adoption of artificial intelligence‑assisted security validation within the software development life cycle and delivery toolchain to improve control testing, remediation quality, traceability, auditability, and resiliency
• Lead or contribute to communities of practice that promote awareness, consistency, and adoption of cybersecurity technologies, secure design patterns, and risk management practices

Required qualifications, capabilities and skills

• Formal training or certification in cybersecurity, security architecture, security engineering, or a related technical discipline, with 5+ years of applied experience
• Hands‑on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies
• Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition
• Proficiency in modern technology environments across one or more disciplines such as public cloud, application programming interfaces, identity and access management, artificial intelligence and machine learning, mobile, infrastructure, or application security
• Ability to evaluate current and emerging technologies and recommend practical security solutions aligned to target architecture, business priorities, resiliency expectations, and risk appetite
• Deep expertise in one or more programming languages, platforms, cloud services, security tools, or application technologies, with the ability to review technical designs and engage credibly with engineering teams
• Experience partnering with product and technology teams to remediate vulnerabilities, incidents, control gaps, recurring issues, or design weaknesses
• Experience using enterprise‑authorized artificial intelligence capabilities to support cybersecurity workflows, with strong validation practices and awareness of data sensitivity
• Strong written and verbal communication skills, including the ability to explain complex technical risks, trade‑offs, and recommendations to senior business leaders and technical stakeholders

Preferred qualifications, capabilities and skills

• Experience with cloud‑native security architecture, application programming interface security, identity federation, OAuth, SAML, secrets management, service‑to‑service authentication, or Zero Trust patterns
• Familiarity with vulnerability management, penetration testing outputs, security testing methodologies, incident remediation, or secure‑by‑design practices
• Experience evaluating third‑party vendor solutions, software as a service platforms, integrations, or emerging technologies from a cybersecurity architecture and risk perspective
• Knowledge of security capabilities such as Security Service Edge, Cloud Access Security Broker, Security Information and Event Management, application programming interface gateways, proxy technologies, traffic inspection, or security monitoring platforms
• Experience leading cross‑functional security reviews, design forums, architecture governance discussions, or communities of practice
• Ability to balance technical depth with pragmatic, risk‑based decision‑making in complex enterprise environments

#CTC

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission‑based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on‑site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

• comprehensive health care coverage
• on‑site health and wellness centers
• a retirement savings plan
• backup childcare
• tuition reimbursement
• mental health support
• financial coaching
• more

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success. Lead secure design and threat modeling to protect modern platforms, applications, and partners across JPMorganChase.