Sr Lead Security Engineer - Email

JPMorgan Chase & Co.; Jersey City (NJ); Sur place; USD 180 000 - 260 000; Plein temps

Résumé du poste

JPMorgan Chase & Co. seeks a Senior Lead Security Engineer within CTC to shape enterprise email security programs and drive modernization across multiple technology domains. You will lead strategy, architecture, and incident response for security of critical communications, partnering with Cyber, Risk, Compliance, and Audit teams.

The role requires executive communication skills, deep security expertise, and a track record of delivering measurable risk reductions in regulated environments.

Qualifications

• 10+ years of cybersecurity experience with leadership in enterprise email security.
• Deep expertise in secure email gateways, phishing protection, and DMARC, DKIM, SPF.
• Experience designing and operating enterprise-scale security architectures in regulated environments.
• Advanced knowledge of cloud, AI/ML, and software engineering disciplines.
• Strong executive communication and cross-functional leadership.

Responsabilités

• Lead strategy and lifecycle management of enterprise email security platforms.
• Define and drive roadmap for email security capabilities, including encryption and DLP.
• Serve as technical authority for email security architecture across regulatory requirements.
• Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders.
• Lead modernization initiatives from concept to deployment and migrations.
• Drive incident response and threat analysis for phishing and BEC threats.
• Establish metrics and governance reporting for leadership and risk committees.
• Develop executive-level strategy papers and management updates.
• Manage vendor relationships and product roadmaps.
• Mentor engineering teams and foster innovation during disruptive events.
• Leverage AI capabilities to accelerate security analysis with data protection in mind.

Connaissances

Email security

Leadership

Threat modeling

Cloud security

AI in security

Executive communication

Outils

Microsoft 365 security

Description du poste

Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.

As a Senior Lead Security Engineer at JPMorganChase within CTC, you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job Responsibilities

• Lead the strategy, architecture, engineering, and lifecycle management of enterprise email security platforms protecting critical business communications.
• Define and drive the roadmap for email security capabilities, including secure email gateways, phishing protection, threat detection and response, encryption, data loss prevention (DLP), and cloud-based security services.
• Serve as the technical authority for email security architecture, ensuring solutions align with cybersecurity, resiliency, regulatory, and multi-level security requirements.
• Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify security requirements, and manage security risk.
• Lead complex engineering and modernization initiatives from concept through deployment, including proof-of-value evaluations, migrations, technology upgrades, and platform transformations.
• Drive incident response, threat analysis, risk assessments, and remediation activities related to phishing, business email compromise (BEC), malicious campaigns, and emerging email-borne threats.
• Establish metrics, KPIs, and reporting that demonstrate platform effectiveness, threat reduction, operational performance, resiliency, and business value.
• Develop executive-level presentations, strategy papers, management updates, and governance communications for senior leadership, risk committees, and oversight forums.
• Manage vendor relationships and drive accountability for product roadmaps, operational performance, risk remediation, and contractual commitments.
• Mentor and lead engineering teams while fostering a culture of innovation, operational excellence, continuous improvement, and effective resource management during disruptive events.
• Leverage enterprise-authorized AI capabilities and reuse-first engineering practices to accelerate security analysis, testing, control validation, and documentation while ensuring data protection, auditability, and compliance.

Required Qualifications, Capabilities, and Skills

• 10+ years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
• Deep expertise in email security technologies, including secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards (SPF, DKIM, and DMARC).
• Proven experience designing, implementing, and operating enterprise-scale security architectures within highly regulated environments.
• Advanced knowledge of software engineering, application development, and technical disciplines such as cloud computing, artificial intelligence, machine learning, or related technologies.
• Strong experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
• Advanced proficiency in one or more programming or automation languages, with the ability to solve complex technical problems independently.
• Demonstrated experience leveraging enterprise-authorized AI capabilities in engineering workflows, including validating AI-assisted recommendations and maintaining awareness of data sensitivity, resiliency, and audit requirements.
• Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
• Demonstrated ability to lead large cross-functional initiatives involving Cybersecurity, Infrastructure, Engineering, Risk, Compliance, Audit, Vendor Management, and business organizations.
• Strong executive communication skills, including experience presenting technical strategies, risks, business cases, roadmaps, metrics, investment recommendations, and program status to senior leadership.
• Exceptional leadership, influence, and problem-solving skills with the ability to build consensus, drive decisions, balance strategic priorities, and deliver measurable risk-reduction outcomes across diverse stakeholder groups.

Preferred Qualifications

• Experience securing Microsoft 365, Exchange Online, Local Exchange/Outlook and other similar enterprise email security platforms.
• Experience leading large-scale email security transformation or modernization initiatives.
• CISSP, CCSP, CISM, or equivalent industry certifications.
• Experience within financial services, banking, or another highly regulated industry.
• Experience supporting regulatory examinations, internal audits, and third-party risk assessments.
• Familiarity with AI-driven security operations, threat detection, and email risk analytics.

#CTC