Senior Security Engineer

Salary: $61,000 - 101,000 per year Requirements:

• We are looking for formal training or certification in cybersecurity, security architecture, security engineering, or a related technical field, along with 5+ years of applied experience.
• We require hands-on experience delivering, advising on, or implementing enterprise cybersecurity solutions, security controls, secure design patterns, or risk mitigation approaches.
• We need strong expertise in threat modeling, threat assessments, secure design reviews, vulnerability analysis, risk evaluation, and defining security requirements.
• We value proficiency in modern technology environments across areas such as public cloud, APIs, identity and access management, AI and machine learning, mobile, infrastructure, or application security.
• We expect the ability to assess current and emerging technologies and recommend practical security solutions aligned to target architecture, business priorities, resiliency goals, and risk appetite.
• We are seeking deep expertise in one or more programming languages, platforms, cloud services, security tools, or application technologies, with the ability to review technical designs and engage effectively with engineering teams.
• We want experience partnering with product and technology teams to address vulnerabilities, incidents, control gaps, recurring issues, or design weaknesses.
• We require experience using enterprise-authorized AI capabilities to support cybersecurity workflows, with strong validation practices and awareness of data sensitivity.
• We need strong written and verbal communication skills, including the ability to explain complex technical risks, trade-offs, and recommendations to senior business leaders and technical stakeholders.
• Preferred experience includes cloud-native security architecture, API security, identity federation, OAuth, SAML, secrets management, service-to-service authentication, or Zero Trust patterns.
• Familiarity with vulnerability management, penetration testing outputs, security testing methods, incident remediation, or secure-by-design practices is preferred.
• Experience assessing third-party vendor solutions, SaaS platforms, integrations, or emerging technologies from a cybersecurity architecture and risk perspective is preferred.
• Knowledge of Security Service Edge, Cloud Access Security Broker, SIEM, API gateways, proxy technologies, traffic inspection, or security monitoring platforms is preferred.
• Experience leading cross-functional security reviews, design forums, architecture governance discussions, or communities of practice is preferred.
• We value the ability to balance technical depth with pragmatic, risk-based decision-making in complex enterprise environments.

• We provide technical guidance and direction to product, engineering, business, contractor, and vendor teams to support secure design and delivery of new capabilities.
• We conduct and maintain threat models, threat assessments, and secure design reviews for enterprise applications, cloud platforms, APIs, integrations, and third-party vendor solutions.
• We identify, document, and communicate cybersecurity risks, mitigation options, compensating controls, and recommended solutions across multiple technical areas and business functions.
• We partner with stakeholders and senior business leaders to recommend design, implementation, or operational changes during vulnerability, incident response, remediation, or emerging risk situations.
• We evaluate current and emerging technologies, including external vendor offerings and internal platforms, by reviewing security designs, technical capabilities, and fit within existing systems and cybersecurity architecture.
• We identify opportunities to remove, reduce, or automate recurring security issues and strengthen the security posture of applications, systems, and technology processes.
• We leverage enterprise-authorized AI capabilities to accelerate security architecture and engineering workflows, including risk identification, threat assessment synthesis, documentation, and decision support, while validating outputs and handling data appropriately.
• We drive reuse-first adoption of AI-assisted security validation within the software development life cycle and delivery toolchain to improve control testing, remediation quality, traceability, auditability, and resiliency.
• We lead or contribute to communities of practice that promote awareness, consistency, and adoption of cybersecurity technologies, secure design patterns, and risk management practices.

• AI
• API
• Cloud
• Support
• Machine Learning
• Marketing
• Mobile
• OAuth
• SAML
• Security

More:

We are JPMorganChase, one of the worlds oldest financial institutions, delivering innovative financial solutions to millions of consumers, small businesses, and major corporate, institutional, and government clients under the J.P. Morgan and Chase brands. Our history spans more than 200 years, and we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management. We offer a competitive total rewards package, with base salary determined by role, experience, skill set, and location. Eligible roles may also receive commission-based pay and/or discretionary incentive compensation in cash or forfeitable equity. Our benefits and programs can include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching, and more, with additional compensation and benefits details shared during the hiring process. We value diversity and inclusion, provide reasonable accommodations where needed, and our Corporate Functions team supports finance, risk, human resources, marketing, and other essential areas that help our businesses, clients, customers, and employees succeed.

last updated 40 week of 2026