{"id":915674,"url":"https://alion.io/job/jpmorganchase-sr-lead-cybersecurity-architect","title":"Sr Lead Cybersecurity Architect","company":{"id":257,"name":"JPMorganChase","domain":"jpmorganchase.com","url":"https://alion.io/company/jpmorganchase","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":90,"open_postings":1151,"ghost_share":0.01,"stale_share":0.533,"repost_share":0.06,"time_to_fill_p50_days":12,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbus, United States","Seattle, United States","Jersey City, United States","Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":172000,"max_usd":354000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Machine Learning","optional":false},{"name":"NIST 800-53","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false},{"name":"AI Agents","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"NIST CSF","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-14T00:00:00Z","employer_posted_date":"2026-09-14","last_verified_at":"2026-10-31T01:00:05Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.\nAs a Senior Lead Cybersecurity Architect at JPMorganChase within the Employee Compute Security Architecture (ECSA) team, you are an integral part of a team that enables endpoint security product teams to deliver secure-by-default, resilient services at speed. Drive significant business impact by embedding clear security standards, consumable security services, and expert guidance into the delivery lifecycle across the endpoint security estate. Apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains, from endpoint and identity to collaboration, virtualization, and cloud-delivered workplace services.\nOur mission is to drive enterprise risk reduction and operational resilience by standardizing secure baseline configurations, integrating proactive threat modeling and consultative reviews, and producing control artifacts that simplify compliance and accelerate time to value.\nJob responsibilities\nLead and own the evaluation of cybersecurity principles, processes, and controls across the endpoint security estate; drive technology assessments using established security standards and patterns, with the authority to influence peers and decision-makers to adopt leading-edge solutions.\nDefine, publish, and maintain secure-by-default baseline configurations and consumable security services that endpoint security product teams can adopt directly within their delivery lifecycle.\nConduct proactive threat modeling, security assessments, and technical risk assessments on design proposals from product and engineering teams, delivering consultative secure design reviews.\nLeverage enterprise-authorized AI and machine learning capabilities to improve the efficiency, throughput, and quality of cybersecurity architecture work - including accelerating risk analysis and decisioning, automating threat modeling and secure design reviews, and generating control artifacts - while validating outputs and handling data according to sensitivity and security requirements.\nServe as a subject matter expert across ECSA and the broader cybersecurity organization, providing technical guidance and direction to technology teams, business partners, contractors, and vendors, and championing secure-by-design adoption at speed.\nWork with stakeholders and senior business leaders to recommend risk mitigations and business modifications during periods of elevated risk, open vulnerability windows, or active risk acceptance decisions, and translate regulatory requirements into actionable technical controls.\nProduce control artifacts and evidence that simplify compliance, streamline audits, and accelerate time to value for product teams.\nActively contribute to the engineering community as an advocate for firmwide frameworks, tools, and practices of the Software Development Life Cycle, integrating security into CI/CD pipelines and DevSecOps workflows.\nInfluence technology decisions by introducing improvements in implementation patterns and architectural design, and identify opportunities to eliminate or automate remediation of recurring issues.\nManage concurrent architecture engagements - balancing priorities, deadlines, and deliverables across multiple product teams - to ensure timely security design input and implementation support.\nAdd to team culture of diversity, equity, inclusion, and respect.\nRequired qualifications, capabilities, and skills\nFormal training or certification on cybersecurity architecture and 5+ years applied experience\nHands-on practical experience delivering enterprise-level cybersecurity solutions and controls, including threat modeling, threat assessments, and secure design reviews.\nExperience applying AI or machine learning tools to cybersecurity or technology workflows, with demonstrated ability to critically evaluate and validate AI-assisted outputs before adoption. Direct application within cybersecurity architecture workflows - such as AI-accelerated risk analysis, threat modeling, or control documentation - is strongly preferred and will characterize day-to-day work in this role.\nAbility to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.\nProficiency in scripting and automation languages (e.g., Python, PowerShell, or Bash), with solid knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, endpoint, identity, AI/ML, or mobile).\nExperience securing endpoint or workplace-compute platforms (e.g., Windows/macOS, EDR, MDM, or virtualization); candidates are expected to bring demonstrated depth in at least one of these areas.\nExperience in infrastructure or systems administration - such as enterprise systems engineering, OS deployment and hardening, or platform operations - and the secure software development lifecycle, including familiarity with automation, continuous delivery, and security integration into CI/CD pipelines.\nExperience in security products, risk management, information security standards, security architecture principles, threat and vulnerability management, and incident response methodologies.\nWorking knowledge of enterprise networking concepts and network security controls - including network segmentation, firewall policy, secure access patterns, and DNS/proxy architecture - sufficient to assess and advise on network-layer design decisions within endpoint and workplace environments.\nUnderstanding of enterprise Identity and Access Management concepts such as federated identity, SSO, OAuth/SAML, privileged access management, and RBAC.\nExperience designing security controls aligned to a comprehensive control catalog (e.g., NIST 800-53), including control scoping, design, and the production of control artifacts and evidence that support compliance and audit readiness.\nAbility to tackle design and functionality problems independently with little to no oversight.\nAbility to evaluate current and emerging technologies to select or recommend the best solutions for the future-state architecture.\nExcellent verbal and written communication skills, with the demonstrated ability to translate security concepts clearly for both technical and non-technical audiences - including executives, senior business leaders, and external partners.\nPreferred qualifications, capabilities, and skills\nIndustry certifications such as CISSP, CCSP, SABSA, or equivalent cybersecurity architecture credentials.\nExperience navigating cross-jurisdictional compliance complexity in a multi-national or global enterprise, including adapting security controls to meet region-specific regulatory requirements.\nFamiliarity with financial services compliance frameworks beyond NIST 800-53, such as SOC 2, PCI-DSS, NIST CSF 2.0, or the NIST AI Risk Management Framework.\nExperience with zero-trust architecture principles and their practical application in hybrid or multi-cloud environments.\nExperience with AI governance practices, MLSecOps, or enterprise AI security policy - such as model risk management, AI supply-chain security, or AI-specific control frameworks.\nExperience securing AI/ML and agentic systems (e.g., threat modeling for prompt injection, data leakage, model extraction, and supply-chain exposure), and willingness to work on proofs of concept for new, innovative approaches.\nExperience providing technical mentorship, conducting architectural guidance sessions, or leading communities of practice within a security or engineering organization.","description_format":"text","description_chars":7789,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Wealth Management & Financial Advisors","Asset Management & Funds"],"lifecycle":[{"event":"open","at":"2026-09-14T19:59:33Z"},{"event":"close","at":"2026-09-29T03:08:11Z"},{"event":"restore","at":"2026-10-16T04:08:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3,429 · green card filings: 933","filings_12m":3429,"filings_prev_12m":3601,"green_card_filings_12m":933,"median_offered_wage_usd":160366,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":88}],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.337,"p_room":0.28,"age_days":46,"expected_fill_days":12,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/jpmorganchase-sr-lead-cybersecurity-architect","json_url":"https://alion.io/job/jpmorganchase-sr-lead-cybersecurity-architect.json","meta":{"generated_at":"2026-10-31T01:58:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2767,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":257},"rest":"https://alion.io/mcp/rest/get_company?id=257"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjpmorganchase-sr-lead-cybersecurity-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjpmorganchase-sr-lead-cybersecurity-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjpmorganchase-sr-lead-cybersecurity-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jpmorganchase-sr-lead-cybersecurity-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjpmorganchase-sr-lead-cybersecurity-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":915674}},{"tool":"search_jobs","arguments":{"company":"jpmorganchase.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":915674},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}