Sr Lead Cybersecurity Architect ECSA

Salary: $61,000 - 101,000 per year Requirements:

• Formal cybersecurity architecture training or certification, with 5+ years of applied experience
• Hands-on experience delivering enterprise cybersecurity solutions and controls, including threat modeling, threat assessments, and secure design reviews
• Experience using AI or machine learning tools in cybersecurity or technology workflows, with the ability to critically validate AI-assisted outputs before use
• Proven ability to assess AI-generated security recommendations, escalate uncertainty, and ensure results meet security, resiliency, and auditability standards
• Proficiency in scripting and automation languages such as Python, PowerShell, or Bash, plus solid knowledge of cybersecurity architecture, applications, and technical processes across one or more domains such as public cloud, endpoint, identity, AI/ML, or mobile
• Experience securing endpoint or workplace-compute platforms such as Windows, macOS, EDR, MDM, or virtualization, with demonstrated depth in at least one area
• Background in infrastructure or systems administration, such as enterprise systems engineering, OS deployment and hardening, or platform operations, along with secure software development lifecycle knowledge and CI/CD security integration
• Experience with security products, risk management, information security standards, security architecture principles, threat and vulnerability management, and incident response methods
• Working knowledge of enterprise networking concepts and network security controls, including segmentation, firewall policy, secure access patterns, and DNS/proxy architecture
• Understanding of enterprise Identity and Access Management concepts such as federated identity, SSO, OAuth/SAML, privileged access management, and RBAC
• Experience designing security controls aligned to a comprehensive control catalog such as NIST 800-53, including scoping, design, and control evidence production for compliance and audit readiness
• Ability to solve design and functionality issues independently with minimal oversight
• Ability to assess current and emerging technologies and recommend suitable future-state solutions
• Excellent verbal and written communication skills, with the ability to explain security concepts clearly to both technical and non-technical audiences, including executives, senior leaders, and external partners
• Preferred: Industry certifications such as CISSP, CCSP, SABSA, or equivalent cybersecurity architecture credentials
• Preferred: Experience working through cross-jurisdictional compliance requirements in a multinational or global enterprise
• Preferred: Familiarity with financial services compliance frameworks such as SOC 2, PCI-DSS, NIST CSF 2.0, or the NIST AI Risk Management Framework
• Preferred: Experience with zero-trust architecture in hybrid or multi-cloud environments
• Preferred: Experience with AI governance, MLSecOps, or enterprise AI security policy
• Preferred: Experience securing AI/ML and agentic systems, including threat modeling for prompt injection, data leakage, model extraction, and supply-chain exposure
• Preferred: Experience providing technical mentorship, architectural guidance sessions, or leading communities of practice

• Lead the evaluation of cybersecurity principles, processes, and controls across the endpoint security estate, using established security standards and patterns to influence adoption of leading-edge solutions
• Define, publish, and maintain secure-by-default baseline configurations and consumable security services for endpoint security product teams
• Conduct proactive threat modeling, security assessments, and technical risk assessments on design proposals, delivering consultative secure design reviews
• Use enterprise-authorized AI and machine learning capabilities to improve the speed, quality, and efficiency of cybersecurity architecture work, while validating outputs and handling data appropriately
• Act as a subject matter expert across ECSA and the wider cybersecurity organization, guiding technology teams, business partners, contractors, and vendors, and championing secure-by-design adoption
• Work with stakeholders and senior business leaders to recommend risk mitigations and business changes during periods of elevated risk, vulnerability windows, or active risk acceptance decisions, and translate regulatory requirements into technical controls
• Produce control artifacts and evidence that simplify compliance, support audits, and speed delivery for product teams
• Contribute to the engineering community by advocating firmwide SDLC frameworks, tools, and practices, and integrating security into CI/CD pipelines and DevSecOps workflows
• Influence technology decisions by improving implementation patterns and architectural design, and identify opportunities to eliminate or automate recurring remediation work
• Manage multiple concurrent architecture engagements, balancing priorities, deadlines, and deliverables across product teams
• Contribute to a culture of diversity, equity, inclusion, and respect

• AI
• Bash
• CI/CD
• Cloud
• DevSecOps
• Firewall
• Support
• macOS
• Machine Learning
• Mobile
• Network
• OAuth
• PowerShell
• Python
• RBAC
• SAML
• Security
• Windows
• Architect

More:

hackajob is working with J.P. Morgan to connect exceptional professionals with this opportunity. This role sits within JPMorganChases Employee Compute Security Architecture team and focuses on enabling endpoint security product teams to deliver secure-by-default, resilient services at speed. The position supports enterprise risk reduction and operational resilience through standardized baseline configurations, proactive threat modeling, consultative reviews, and control artifacts that simplify compliance and accelerate time to value. JPMorganChase is a long-established global financial institution serving consumers, small businesses, corporations, institutions, and government clients through the J.P. Morgan and Chase brands. We offer a competitive total rewards package, including base salary determined by role, experience, skill set, and location, with potential commission or discretionary incentive compensation in eligible roles. Our benefits may include comprehensive health coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching, and more. We are committed to diversity, inclusion, and equal opportunity across our global workforce.

last updated 38 week of 2026