Leads cybersecurity architecture for endpoint and workplace-compute environments. Defines secure baselines, conducts threat modeling and design reviews, assesses risks, produces compliance artifacts, and guides product and engineering teams. Applies AI and machine learning to improve security architecture workflows while validating outputs. Advises leaders on risk mitigation, integrates security into CI/CD and DevSecOps, evaluates technologies, and manages concurrent architecture engagements across endpoint, identity, cloud, virtualization, and collaboration platforms.
Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.
As a Senior Lead Cybersecurity Architect at JPMorganChase within the Employee Compute Security Architecture (ECSA) team, you are an integral part of a team that enables endpoint security product teams to deliver secure-by-default, resilient services at speed. Drive significant business impact by embedding clear security standards, consumable security services, and expert guidance into the delivery lifecycle across the endpoint security estate. Apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains, from endpoint and identity to collaboration, virtualization, and cloud-delivered workplace services.
Our mission is to drive enterprise risk reduction and operational resilience by standardizing secure baseline configurations, integrating proactive threat modeling and consultative reviews, and producing control artifacts that simplify compliance and accelerate time to value.
Job responsibilities
- Lead and own the evaluation of cybersecurity principles, processes, and controls across the endpoint security estate; drive technology assessments using established security standards and patterns, with the authority to influence peers and decision-makers to adopt leading-edge solutions.
- Define, publish, and maintain secure-by-default baseline configurations and consumable security services that endpoint security product teams can adopt directly within their delivery lifecycle.
- Conduct proactive threat modeling, security assessments, and technical risk assessments on design proposals from product and engineering teams, delivering consultative secure design reviews.
- Leverage enterprise-authorized AI and machine learning capabilities to improve the efficiency, throughput, and quality of cybersecurity architecture work — including accelerating risk analysis and decisioning, automating threat modeling and secure design reviews, and generating control artifacts — while validating outputs and handling data according to sensitivity and security requirements.
- Serve as a subject matter expert across ECSA and the broader cybersecurity organization, providing technical guidance and direction to technology teams, business partners, contractors, and vendors, and championing secure-by-design adoption at speed.
- Work with stakeholders and senior business leaders to recommend risk mitigations and business modifications during periods of elevated risk, open vulnerability windows, or active risk acceptance decisions, and translate regulatory requirements into actionable technical controls.
- Produce control artifacts and evidence that simplify compliance, streamline audits, and accelerate time to value for product teams.
- Actively contribute to the engineering community as an advocate for firmwide frameworks, tools, and practices of the Software Development Life Cycle, integrating security into CI/CD pipelines and DevSecOps workflows.
- Influence technology decisions by introducing improvements in implementation patterns and architectural design, and identify opportunities to eliminate or automate remediation of recurring issues.
- Manage concurrent architecture engagements — balancing priorities, deadlines, and deliverables across multiple product teams — to ensure timely security design input and implementation support.
- Add to team culture of diversity, equity, inclusion, and respect.
Required qualifications, capabilities, and skills
- Formal training or certification on cybersecurity architecture and 5+ years applied experience
- Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls, including threat modeling, threat assessments, and secure design reviews.
- Experience applying AI or machine learning tools to cybersecurity or technology workflows, with demonstrated ability to critically evaluate and validate AI-assisted outputs before adoption. Direct application within cybersecurity architecture workflows — such as AI-accelerated risk analysis, threat modeling, or control documentation — is strongly preferred and will characterize day-to-day work in this role.
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
- Proficiency in scripting and automation languages (e.g., Python, PowerShell, or Bash), with solid knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, endpoint, identity, AI/ML, or mobile).
- Experience securing endpoint or workplace-compute platforms (e.g., Windows/macOS, EDR, MDM, or virtualization); candidates are expected to bring demonstrated depth in at least one of these areas.
- Experience in infrastructure or systems administration — such as enterprise systems engineering, OS deployment and hardening, or platform operations — and the secure software development lifecycle, including familiarity with automation, continuous delivery, and security integration into CI/CD pipelines.
- Experience in security products, risk management, information security standards, security architecture principles, threat and vulnerability management, and incident response methodologies.
- Working knowledge of enterprise networking concepts and network security controls — including network segmentation, firewall policy, secure access patterns, and DNS/proxy architecture — sufficient to assess and advise on network-layer design decisions within endpoint and workplace environments.
- Understanding of enterprise Identity and Access Management concepts such as federated identity, SSO, OAuth/SAML, privileged access management, and RBAC.
- Experience designing security controls aligned to a comprehensive control catalog (e.g., NIST 800-53), including control scoping, design, and the production of control artifacts and evidence that support compliance and audit readiness.
- Ability to tackle design and functionality problems independently with little to no oversight.
- Ability to evaluate current and emerging technologies to select or recommend the best solutions for the future-state architecture.
- Excellent verbal and written communication skills, with the demonstrated ability to translate security concepts clearly for both technical and non-technical audiences — including executives, senior business leaders, and external partners.
Preferred qualifications, capabilities, and skills
- Industry certifications such as CISSP, CCSP, SABSA, or equivalent cybersecurity architecture credentials.
- Experience navigating cross-jurisdictional compliance complexity in a multi-national or global enterprise, including adapting security controls to meet region-specific regulatory requirements.
- Familiarity with financial services compliance frameworks beyond NIST 800-53, such as SOC 2, PCI-DSS, NIST CSF 2.0, or the NIST AI Risk Management Framework.
- Experience with zero-trust architecture principles and their practical application in hybrid or multi-cloud environments.
- Experience with AI governance practices, MLSecOps, or enterprise AI security policy — such as model risk management, AI supply-chain security, or AI-specific control frameworks.
- Experience securing AI/ML and agentic systems (e.g., threat modeling for prompt injection, data leakage, model extraction, and supply-chain exposure), and willingness to work on proofs of concept for new, innovative approaches.
- Experience providing technical mentorship, conducting architectural guidance sessions, or leading communities of practice within a security or engineering organization.
JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
JPMorganChase Chicago, Illinois, USA Office
Chicago, IL, United States
Similar Jobs
Financial Services
Leads cybersecurity architecture for enterprise network and cloud environments. Responsibilities include threat modeling, assessing network configurations and perimeter-exposed systems, identifying security gaps, developing actionable mitigations, advising engineering teams, and prioritizing risk remediation. The role serves as a subject matter expert in network security, cloud security, segmentation, zero trust, and secure connectivity while validating AI-assisted security recommendations for resiliency, auditability, and data protection.
Top Skills:
Ai/MlAmazon Web ServicesCloud Network SecurityGoogle Cloud PlatformAzureMitre Att&CkNetwork Security ArchitectureNetwork SegmentationPerimeter ControlsSecure ConnectivityStrideZero Trust
Financial Services
Leads cybersecurity architecture and design reviews for cloud platforms, SaaS, Microsoft 365, AI-enabled services, and technology integrations. Conducts threat modeling, attack-surface analysis, and control assessments; identifies risks and develops mitigation strategies. Partners with engineering, product, risk, and business stakeholders to resolve security findings, evaluate emerging technologies, and promote reusable security patterns, AI-assisted validation, and secure SDLC practices.
Top Skills:
Ai/MlAPIsAWSExchange OnlineGCPLlmsMicrosoft 365AzureMicrosoft CopilotMicrosoft DefenderMicrosoft Entra IdMicrosoft GraphMicrosoft PurviewMicrosoft TeamsMitre Att&CkNistOauthOnedriveOwaspSaaSSharepoint OnlineStrideZero Trust
Aerospace • Hardware • Robotics • Software
Build Revel’s security program from the ground up, securing its product, infrastructure, cloud, on-premises, hardware-integrated environments, and software delivery pipelines. Responsibilities include threat modeling, security architecture, Infrastructure as Code, detection and incident response, vulnerability management, compliance with ITAR/NIST/CUI/CMMC requirements, customer security reviews, and security enablement. The role will establish foundational processes and may eventually lead a growing security team.
Top Skills:
AWSAws CdkAws GovcloudAzure GovernmentCi/CdCmmcCrowdstrikeCuiDisa StigsDockerEdrFedrampGoInfrastructure As CodeItarKubernetesLinuxNist 800-171Nist 800-53PantherPythonRmfRustSentineloneSIEMSplunkTerraform
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
