Senior Security Architect: Threat Modeling & Cloud

JPMorgan Chase; New York (NY); On-site; USD 176,000 - 260,000; Full time

Job summary

JPMorganChase is seeking a Senior Lead Security Engineer to partner with product, technology, and business teams to assess security across features, platforms, and third‑party solutions. You will translate complex findings into clear mitigation options and architecture recommendations for senior stakeholders.

You will lead threat modeling, secure design reviews, and risk evaluations, applying secure design principles and risk‑based decisions in modern technology environments.

Qualifications

• Formal training or certification in cybersecurity, security architecture, or related discipline with 5 years of applied experience.
• Hands-on experience delivering or advising enterprise cybersecurity solutions and risk mitigation strategies.
• Expertise in threat modeling, threat assessments, secure design reviews, and risk evaluation.
• Proficiency across one or more disciplines such as cloud, IAM, APIs, AI/ML, mobile, infrastructure, or application security.
• Ability to evaluate technologies and recommend practical security solutions aligned to target architecture and business priorities.
• Deep expertise in programming languages, platforms, cloud services, security tools, or application technologies, with ability to review designs.
• Experience partnering with product and technology teams to remediate vulnerabilities and control gaps.
• Experience using enterprise AI capabilities to support cybersecurity workflows with strong validation and data sensitivity awareness.
• Strong written and verbal communication skills to explain complex risks to leaders and stakeholders.

Responsibilities

• Provide technical guidance to product, engineering, business, contractor, and vendor teams for secure design and delivery of new capabilities.
• Conduct threat models, threat assessments, and secure design reviews for enterprise apps, cloud platforms, APIs, integrations, and vendor solutions.
• Identify and communicate cybersecurity risks, mitigation options, and recommended solutions across technical areas and business functions.
• Partner with stakeholders and senior leaders to recommend design, implementation, or operational changes during vulnerability periods or emerging risk.
• Evaluate current and emerging technologies through outcomes‑oriented review of security designs and architecture.
• Identify opportunities to reduce recurring security issues and improve overall security posture of applications and processes.
• Leverage enterprise‑authorized AI to accelerate security architecture and engineering workflows with proper validation.
• Drive reuse‑first adoption of AI-assisted security validation within SDLC and delivery toolchains for better testing and traceability.
• Lead or contribute to communities of practice that promote security awareness and risk management practices.

Skills

Threat modeling

Secure design reviews

Cloud security

Identity and access management

AI/ML for security

Security architecture

Vulnerability analysis

Stakeholder communication

Job description

JPMorganChase is seeking a Senior Lead Security Engineer to partner with product, technology, and business teams to assess security across features, platforms, and third‑party solutions. You will translate complex findings into clear mitigation options and architecture recommendations for senior stakeholders.

You will lead threat modeling, secure design reviews, and risk evaluations, applying secure design principles and risk‑based decisions in modern technology environments.