Lead Cybersecurity Architect

JPMorganChase is seeking a Lead Cybersecurity Architect to help define and lead the evaluation of cybersecurity principles, controls, and enterprise solutions across software applications and platform products. Within Cybersecurity and Technology Controls, this role blends architecture leadership with vulnerability-driven recommendations and AI-assisted security validation across the software development lifecycle.

This onsite position is based in Brooklyn, NY, and the role spans technical guidance for engineering and business partners while driving reuse-first security validation practices in toolchains and routines.

What you’ll do

• Guide evaluation of current cybersecurity principles, processes, and controls, and lead assessment of new technologies using existing standards and frameworks
• Leverage enterprise-authorized AI capabilities to accelerate cybersecurity risk analysis and control assessment, while validating outputs and managing data according to sensitivity and security requirements
• Provide technical guidance and direction to support the business and technical teams, contractors, and vendors as a firm-wide subject matter expert in one or more focus areas
• Partner with stakeholders and senior business leaders to recommend business modifications during vulnerability periods
• Actively contribute to the engineering community by advocating firm-wide frameworks, tools, and software development lifecycle practices
• Drive reuse-first adoption of AI-assisted security validation within the software development lifecycle and toolchain routines to improve control testing, remediation quality, and traceability and auditability in line with resiliency expectations

What you bring

• 5+ years of applied experience, with formal training or certification focused on cybersecurity architecture concepts
• Hands-on experience performing threat modeling, attack-surface analysis, or security architecture assessments
• Hands-on experience delivering enterprise-level cybersecurity solutions and controls
• Demonstrated experience using enterprise-authorized AI capabilities to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring alignment with security, resiliency, and auditability expectations
• Advanced expertise in one or more programming languages and/or applications, plus advanced knowledge of cybersecurity architecture and applications within one or more disciplines (for example, public cloud, AI/ML, mobile)
• Ability to address design and functionality problems independently with little to no oversight
• Ability to evaluate current and emerging technologies to select or recommend future-state architecture solutions
• Ability to communicate complex security concepts to senior business leaders and non-technical stakeholders

Technologies and frameworks

• AI/ML, NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles
• Public cloud with AWS, GCP, and Microsoft Azure
• OAuth, machine-to-machine authentication, APIs
• Large language model-enabled applications and secure-as-a-service environments
• Software development lifecycle and AI-assisted security validation

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching

Additional preferred qualifications

• Experience securing enterprise cloud and software-as-a-service environments, including architecture, data flows, identity, access, integrations, and security controls across third-party services
• Security architecture experience across AWS, GCP, and Microsoft Azure, including cloud-native security controls and shared responsibility models
• Experience evaluating SaaS integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective
• Experience securing AI/ML and large language model-enabled applications, agents, and emerging AI capabilities, including risks tied to data access, permissions, external integrations, and third-party model dependencies
• Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and SaaS technologies
• Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles

Compensation: USD 156,750 - 215,000 per year.

Team context

• Corporate Functions professionals support a diverse range of areas from finance and risk to human resources and marketing.
• Corporate teams help ensure businesses, clients, customers, and employees are set up for success.