Senior Lead Security Engineer - Threat Modeling

Next Frontier Capital; New York (NY); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Comprehensive health care coverage

On‑site health and wellness centers

Retirement savings plan

Tuition reimbursement

Mental health support

Job summary

JPMorganChase is seeking a Senior Lead Security Engineer to partner with product, technology, and business teams to assess security of new features, platforms, and third‑party solutions. You will translate complex findings into practical mitigations and risk narratives for senior stakeholders.

You will lead threat modeling, secure design reviews, and risk assessments across cloud, APIs, IAM, and AI/ML initiatives, while driving secure design and architecture improvements in enterprise

Qualifications

• Formal training or certification in cybersecurity, security architecture, security engineering, or a related technical discipline, with 5+ years of applied experience
• Hands‑on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation strategies
• Expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and security requirements definition
• Proficiency in modern technology environments across one or more disciplines such as public cloud, APIs, IAM, AI/ML, mobile, infrastructure, or application security
• Ability to evaluate technologies and recommend practical security solutions aligned to target architecture, priorities, resiliency, and risk appetite

Responsibilities

• Provide technical guidance and direction to product, engineering, business, contractor, and vendor teams to support secure design and delivery of new capabilities
• Conduct and maintain threat models, threat assessments, and secure design reviews for enterprise applications, cloud platforms, APIs, integrations, and third‑party vendor solutions
• Identify, document, and communicate cybersecurity risks, mitigation options, compensating controls, and recommended solutions across multiple technical areas
• Partner with stakeholders and senior leaders to recommend design, implementation, or operational changes during vulnerability periods, incidents, or risk
• Evaluate current and emerging technologies through outcomes‑oriented review of security designs, capabilities, and fit within cybersecurity architecture
• Identify opportunities to eliminate or reduce recurring security issues and improve overall security posture of applications and processes
• Leverage enterprise‑authorized AI capabilities to accelerate security workflows while validating outputs and handling data securely
• Drive reuse‑first adoption of AI‑assisted security validation within SDLC and delivery toolchain to improve testing, remediation, traceability, and resiliency
• Lead or contribute to communities of practice that promote awareness, consistency, and adoption of cybersecurity technologies and risk management

Skills

Threat modeling

Cloud security

Secure design reviews

Risk assessment

Security architectures

Education

Cybersecurity certification or degree

Bachelor's degree in a related field

Tools

Cloud platforms (AWS/Azure/GCP)

IAM & identity management

SIEM / monitoring tools

Job description

JPMorganChase is seeking a Senior Lead Security Engineer to partner with product, technology, and business teams to assess security of new features, platforms, and third‑party solutions. You will translate complex findings into practical mitigations and risk narratives for senior stakeholders.

You will lead threat modeling, secure design reviews, and risk assessments across cloud, APIs, IAM, and AI/ML initiatives, while driving secure design and architecture improvements in enterprise