Sr Lead Security Engineer - Email

JPMorganChase is seeking a Sr Lead Security Engineer - Email to set direction for protecting enterprise email communications. In this onsite role in Jersey City, NJ, you will own the strategy, architecture, engineering, and lifecycle management for email security platforms, guiding modernization while strengthening incident response and threat reduction.

You will define an email security roadmap spanning secure email gateways, phishing protection, threat detection and response, encryption, DLP, and cloud-based security services, partnering with cross-functional stakeholders to align technical decisions with cybersecurity, resiliency, regulatory, and multi-level security requirements.

Key Responsibilities

• Lead the strategy, architecture, engineering, and lifecycle management of enterprise email security platforms protecting critical business communications.
• Define and drive an email security roadmap covering secure email gateways, phishing protection, threat detection and response, encryption, data loss prevention (DLP), and cloud-based security services.
• Act as the technical authority for email security architecture, ensuring solutions align to cybersecurity, resiliency, regulatory, and multi-level security needs.
• Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify security requirements, and manage security risk.
• Lead complex engineering and modernization efforts through concept to deployment, including proof-of-value evaluations, migrations, technology upgrades, and platform transformations.
• Drive incident response and remediation for phishing, business email compromise (BEC), malicious campaigns, and emerging email-borne threats, including threat analysis and risk assessments.
• Create metrics, KPIs, and reporting to demonstrate platform effectiveness, threat reduction, operational performance, resiliency, and business value.
• Develop executive-level materials such as strategy papers, management updates, and governance communications for senior leadership and risk oversight forums.
• Manage vendor relationships and drive accountability for product roadmaps, operational performance, risk remediation, and contractual commitments.
• Mentor and lead engineering teams, supporting innovation, operational excellence, continuous improvement, and effective resource management during disruptive events.
• Use enterprise-authorized AI capabilities and reuse-first engineering practices to accelerate security analysis, testing, control validation, and documentation while ensuring data protection, auditability, and compliance.

Required Qualifications

• 10+ years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
• Deep expertise in email security technologies, including secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards (SPF, DKIM, and DMARC).
• Proven experience designing, implementing, and operating enterprise-scale security architectures in highly regulated environments.
• Advanced knowledge of software engineering and technical disciplines such as cloud computing, artificial intelligence, machine learning, or related technologies.
• Strong experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
• Advanced proficiency in one or more programming or automation languages, with the ability to solve complex technical problems independently.
• Demonstrated experience leveraging enterprise-authorized AI capabilities in engineering workflows, including validating AI-assisted recommendations and maintaining awareness of data sensitivity, resiliency, and audit requirements.
• Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
• Demonstrated ability to lead large cross-functional initiatives across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, Audit, Vendor Management, and business organizations.
• Strong executive communication skills, including experience presenting technical strategies, risks, business cases, roadmaps, metrics, investment recommendations, and program status to senior leadership.
• Exceptional leadership, influence, and problem-solving skills to build consensus, drive decisions, balance strategic priorities, and deliver measurable risk-reduction outcomes across diverse stakeholder groups.

Technologies

• SPF, DKIM, DMARC
• Cloud computing
• Artificial intelligence
• Machine learning

Preferred Qualifications

• Experience securing Microsoft 365, Exchange Online, Local Exchange/Outlook, and similar enterprise email security platforms.
• Experience leading large-scale email security transformation or modernization initiatives.
• CISSP, CCSP, CISM, or equivalent industry certifications.
• Experience in financial services, banking, or another highly regulated industry.
• Experience supporting regulatory examinations, internal audits, and third-party risk assessments.
• Familiarity with AI-driven security operations, threat detection, and email risk analytics.

Salary: USD 175,750 - 260,000 per year. Experience level: 10+ years.