Senior Lead Security Engineer: Secure Design & Risk

JPMorgan Chase & Co.; Brooklyn (AL); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive total rewards package

Job summary

JPMorganChase is seeking a Senior Lead Security Engineer to partner with product, technology, and business stakeholders to evaluate the security of new features, platforms, applications, and third-party solutions. You will apply secure design principles, threat modeling, and risk-based decision-making to reduce misuse, circumvention, and malicious behavior across modern technology environments.

You will serve as a senior technical advisor, translating complex findings into clear mitigation

Qualifications

• 5+ years of applied experience in cybersecurity, security architecture, or security engineering.
• Hands-on experience delivering enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies.
• Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition.
• Ability to review technical designs and engage credibly with engineering teams.

Responsibilities

• Provide technical guidance to product, engineering, business, contractor, and vendor teams to support secure design and delivery of new capabilities
• Conduct threat models, threat assessments, and secure design reviews for enterprise applications, cloud platforms, APIs, integrations, and third-party solutions
• Identify, document, and communicate cybersecurity risks, mitigation options, compensating controls, and recommended solutions across multiple technical areas
• Partner with stakeholders and senior business leaders to recommend design, implementation, or operational changes during periods of vulnerability, incident response, remediation, or emerging risk
• Evaluate current and emerging technologies, including external vendor offerings and internal platforms, through outcomes-oriented review of security designs, capabilities, and fit within existing architecture
• Identify opportunities to eliminate, reduce, or automate recurring security issues and improve security posture across applications and technology processes
• Leverage enterprise-authorized AI capabilities to accelerate security workflows, while validating outputs and handling data according to sensitivity and security requirements
• Drive reuse-first adoption of AI-assisted security validation within the SDLC and delivery toolchain to improve control testing, remediation quality, traceability, and resiliency
• Lead or contribute to communities of practice promoting awareness, consistency, and adoption of cybersecurity technologies and secure design patterns

Skills

Threat modeling

Security architecture

Security engineering

Risk assessment

Senior stakeholder communication

Programming knowledge

Job description

JPMorganChase is seeking a Senior Lead Security Engineer to partner with product, technology, and business stakeholders to evaluate the security of new features, platforms, applications, and third-party solutions. You will apply secure design principles, threat modeling, and risk-based decision-making to reduce misuse, circumvention, and malicious behavior across modern technology environments.

You will serve as a senior technical advisor, translating complex findings into clear mitigation