Sr. Lead Security Engineer

JPMorganChase is seeking a Senior Lead Security Engineer to strengthen security architecture and technical strategy within the firm’s Cybersecurity & Technology Controls organization. Based in Plano, TX (onsite), this role partners across engineering, product, risk, and operations to shape secure, scalable solutions while meeting security and regulatory expectations. The position also includes AI-focused initiatives that leverage enterprise-authorized AI capabilities in security engineering workflows.

Role Overview

In this position, you will own security architecture and drive security engineering initiatives end-to-end, from design through implementation. You will act as a senior technical authority and mentor, leading threat modeling, risk assessment, and security reviews while influencing architecture and governance forums. You will also help facilitate security requirements clarification for multiple networks, supporting multi-level security needs across the organization.

Key Responsibilities

• Own security architecture and technical strategy for major platforms, products, or security domains including cryptography, cloud security, identity, and confidential computing.
• Lead complex security engineering efforts from design through implementation, coordinating influence across multiple teams and organizations.
• Drive threat modeling, risk assessment, and security reviews to ensure solutions meet security and regulatory requirements.
• Serve as a senior technical authority and mentor, guiding engineers and representing Security Engineering in architecture and governance forums.
• Partner across engineering, product, risk, and operations to deliver secure, scalable solutions and influence enterprise security direction.
• Lead AI-focused initiatives within the team.
• Facilitate clarification of security requirements for multiple networks to enable multi-level security aligned to organizational needs.
• Use enterprise-authorized AI capabilities to accelerate security risk analysis and documentation (for example, synthesizing threat assessments), while validating outputs and ensuring sensitive data is handled appropriately.
• Work with stakeholders and senior business leaders to recommend business modifications during vulnerability periods.
• Triaging based on risk assessments of threats and managing resources to cover impact from disruptive events.
• Apply reuse-first, AI-assisted practices within SDLC and toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

Requirements

• 5+ years of applied experience plus formal training or certification in security engineering concepts.
• Skilled in planning, designing, and implementing enterprise level security solutions.
• Demonstrated experience using enterprise-authorized AI capabilities to support security engineering workflows, including strong validation habits and data sensitivity awareness.
• Ability to review and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations.
• Advanced in one or more programming language(s), able to tackle design and functionality problems independently with little to no oversight.
• Advanced knowledge of software application development and technical processes, with in-depth knowledge in one or more disciplines such as cloud, artificial intelligence, machine learning, or mobile.
• Extensive experience with threat modeling, discovery, vulnerability, and penetration testing.

Benefits

• Health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching

About the Team

The Cybersecurity & Technology Controls group at JPMorganChase aligns the firm’s cybersecurity, access management, controls, and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable appropriate control design, adoption, and integration, deliver efficient and consistent processes and solutions, and drive automation of controls. Its number one priority is enabling the business by keeping the firm safe, stable, and resilient.

High Risk Roles (HRR)

• High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of staff integrity due to 1) sensitive cybersecurity and technology functions or 2) information received regarding sensitive cybersecurity or technology matters.
• HRR users are subject to enhanced pre-hire screening, including criminal and credit background checks (as allowed by law).
• Enhanced screening must be successfully completed prior to commencing employment or assignment.