Lead Security Engineer
Job Description
Benefits that support your wellbeing and long-term security. JPMorganChase offers health care coverage, on-site health and wellness centers, retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching.
As a Lead Security Engineer in Jersey City, NJ (onsite), you will lead enterprise email security strategy and execution within CTC. You will drive the end-to-end roadmap for protecting critical business communications, modernizing capabilities across regulated environments, and managing security risk through lifecycle management and incident response.
What you’ll do
- Lead strategy, architecture, engineering, and lifecycle management for enterprise email security platforms that safeguard business communications.
- Define and drive the email security roadmap, including secure email gateways, phishing protection, threat detection and response, encryption, and data loss prevention (DLP), plus cloud-based security services.
- Act as the technical authority for email security architecture, ensuring alignment with cybersecurity, resiliency, regulatory expectations, and multi-level security requirements.
- Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify requirements, and manage security risk.
- Own complex engineering and modernization efforts from concept through deployment, including proof-of-value evaluations, migrations, technology upgrades, and platform transformations.
- Lead incident response and remediation for phishing, business email compromise (BEC), malicious campaigns, and emerging email-borne threats.
- Establish metrics, KPIs, and reporting to demonstrate platform effectiveness, threat reduction, operational performance, resiliency, and business value.
- Create executive-ready communication, including strategy papers, management updates, and governance materials for senior leadership and oversight forums.
- Manage vendor relationships and drive accountability for roadmaps, operational performance, risk remediation, and contractual commitments.
- Mentor and lead engineering teams while fostering innovation, operational excellence, and continuous improvement during disruptive events.
- Use enterprise-authorized AI capabilities and reuse-first engineering practices to accelerate security analysis, testing, control validation, and documentation, while maintaining data protection, auditability, and compliance.
What you bring
- 5+ years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
- Deep expertise in email security technologies, including secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards such as SPF, DKIM, and DMARC.
- Proven experience designing, implementing, and operating enterprise-scale security architectures within highly regulated environments.
- Advanced knowledge across software engineering and technical disciplines such as cloud computing, artificial intelligence, machine learning, or related technologies.
- Strong experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
- Advanced proficiency in one or more programming or automation languages to solve complex technical problems independently.
- Demonstrated experience leveraging enterprise-authorized AI in engineering workflows, including validating AI-assisted recommendations and meeting data sensitivity, resiliency, and audit requirements.
- Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
- Ability to lead large cross-functional initiatives across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, Audit, vendor management, and business partners.
- Strong executive communication skills, including presenting strategies, risks, business cases, roadmaps, metrics, investment recommendations, and program status.
- Exceptional leadership, influence, and problem-solving skills to build consensus, drive decisions, balance priorities, and deliver measurable risk reduction outcomes.
Nice to have
- Experience securing Microsoft 365, Exchange Online, Local Exchange/Outlook, or similar enterprise email security platforms.
- Experience leading large-scale email security transformation or modernization initiatives.
- CISSP, CCSP, CISM, or equivalent industry certifications.
- Experience in financial services, banking, or another highly regulated industry.
- Experience supporting regulatory examinations, internal audits, and third-party risk assessments.
- Familiarity with AI-driven security operations, threat detection, and email risk analytics.
Team context
JPMorganChase corporate functions include professionals across areas from finance and risk to human resources and marketing. Corporate teams help set the businesses, clients, customers, and employees up for success.
Location: Jersey City, NJ (onsite)
Compensation: USD 156,750 - 215,000 per year
Experience: 5+ years