Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.  

As a Senior Lead Cybersecurity Architect for Enterprise product Security at JPMorganChase, you will join a security architecture team that partners closely with network and product teams to strengthen the firm’s network and cloud network security posture. You’ll apply deep network architecture expertise to threat model new and evolving technologies, assess existing production environments (including critical perimeter-exposed systems), and provide clear, actionable recommendations that teams can implement and track to closure.

This role is ideal for an architect who thrives in a consultative environment—able to quickly understand different technical contexts, identify high-impact risks, and influence practical mitigations. While we value threat modeling experience, strong network / cloud network security architecture is essential.

Job responsibilities

• Lead and/or facilitate threat modeling for new products, network designs, and environment changes, with a focus on high-risk and perimeter-exposed technologies.
• Assess existing production technologies and analyze network configurations to identify security gaps and improve secure device management and control effectiveness.
• Provide security architecture consultations to product and engineering teams—translating risk into concrete, trackable mitigation recommendations.
• Partner with stakeholders to prioritize work as emerging threats evolve (including changes driven by new AI-related threat patterns).
• Serve as a subject matter expert for network and cloud network security architecture, patterns, and best practices (e.g., segmentation, zero trust concepts, secure connectivity, perimeter controls).
• Use approved tools (including AI-assisted capabilities where appropriate) to accelerate analysis while following data handling, validation, and security requirements.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
• Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing, remediation quality, and traceability/auditability in line with resiliency expectations.

Required qualifications, capabilities, and skills

• Strong background in network security architecture and/or cloud network security architecture
• Threat modeling experience and/or working knowledge of common approaches such as STRIDE and MITRE 
• Experience assessing and improving security for network configurations and controls in complex enterprise environments.
• Ability to operate in a consultative model: communicate clearly, influence without authority, and tailor recommendations to varied technical teams.
• Demonstrated ability to translate findings into actionable mitigations that can be tracked and validated.
• Strong judgment around risk, resiliency, and auditability; comfortable escalating ambiguity and validating tool-generated outputs.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Advanced expertise in one or more programming language(s) and/or applications, with advanced knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, AI/ML, mobile, etc.)
• Ability to tackle design and functionality problems independently with little to no oversight
• Ability to evaluate current and emerging technologies to select or recommend the best solutions for the future state architecture

Preferred qualifications, capabilities, and skills

• Professional security certification (e.g., CISSP, CISM, or equivalent)
• Network security certification (e.g., Cisco, Palo Alto Networks, Check Point, or equivalent)
• Cloud certification or strong cloud networking/security experience in Amazon Web Services, Microsoft Azure, or Google Cloud Platform