Senior Product Security Architect: Lead Secure Dev & Cloud

JP Morgan Chase; Jersey City (NJ); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health care coverage

On-site health and wellness centers

Retirement savings plan

Tuition reimbursement

Mental health support

Job summary

JPMorganChase seeks an experienced Product Security Team Member to advance our product security program. You will lead security initiatives with hands-on expertise in secure development and collaborate across engineering, architecture, and risk teams to mitigate risks through the product lifecycle.

The role requires deep knowledge of secure SDLC, threat modeling, vulnerability management, and cloud platforms.

Qualifications

• 5+ years in a product security role with a track record of driving security initiatives.
• Strong knowledge of secure software development practices and OWASP Top Ten.
• Experience with threat modeling, risk assessment, and vulnerability management.
• Proficiency in programming languages (Java, Python, C/C++).
• Familiarity with NIST CSF and regulatory requirements (GDPR, HIPAA).
• Excellent leadership and communication skills.
• Security certifications such as CISSP, CISM are a plus.
• Cloud certifications (AWS) are a plus.
• Experience with DevSecOps practices and cross-functional collaboration.

Responsibilities

• Partner with Engineering & Architecture teams to integrate security controls into platforms and cloud environments.
• Develop and propagate security design patterns for secure technology solutions.
• Guide engineering teams in secure development of infrastructure services and products.
• Ensure security considerations are integrated into SDLC from start to finish.
• Develop extensible security solutions aligned to product strategy.
• Conduct security assessments, threat modeling, and vulnerability assessments.
• Collaborate with architects and developers to implement secure coding practices and reviews.
• Stay updated on emerging threats and trends relevant to products.
• Drive security education and awareness across the organization.

Skills

Secure SDLC

Threat modeling

Vulnerability management

Java

Python

C/C++

NIST CSF

Leadership

Communication

Tools

AWS

GCP

DevSecOps tools

Job description

JPMorganChase seeks an experienced Product Security Team Member to advance our product security program. You will lead security initiatives with hands-on expertise in secure development and collaborate across engineering, architecture, and risk teams to mitigate risks through the product lifecycle.

The role requires deep knowledge of secure SDLC, threat modeling, vulnerability management, and cloud platforms.