JPMorganChase logo

Hiring Event - Security Architecture & Engineering - Sep 24-25th 2026

JPMorganChase
18 hours ago
Full-time
On-site
McLean, Virginia, United States
$204,250 - $285,000 USD yearly
Description

As a Cybersecurity Architect/Engineer , you play a pivotal role in shaping secure solutions for software applications and platform products, driving meaningful business impact through deep technical expertise and innovative problem-solving. You will leverage advanced architecture capabilities to identify, communicate, and mitigate risk while collaborating across the organization to drive best-in-class outcomes , and lead the creation of AI-enabled cybersecurity solutions and reusable frameworks at the forefront of industry best practices.

Job Responsibilities

  • Design, develop, and troubleshoot creative security solutions, producing secure, high-quality production code and reviewing code. Architect complex, scalable, and reusable cybersecurity frameworks for cloud and on-premises environments, driving standardization and consistency across the organization 

  • Continuously evolve security protocols by assessing current controls, identifying gaps, and implementing improvements aligned with industry standards and governmental regulations 

  • Implement and manage IAM protocols (RBAC, OAuth2.0, SCIM, WebAuthN, OPA, PBAC) and apply advanced security principles including encryption, data security, and risk management. Lead cybersecurity strategy for AI-enabled products and drive adoption of new technical methods, including leading proof-of-concept initiatives for emerging technologies 

  • Translate complex technical issues to leadership, enabling strategic decisions about target state architecture 

  • Serve as a subject matter expert, providing technical guidance to stakeholders, business leaders, technical teams, contractors, and vendors 

  • Mentor engineering teams, advocate for firmwide SDLC best practices, and champion a culture of diversity, inclusion, and continuous learning.

  • Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.

  • Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.

     

Required Qualifications, Capabilities, and Skills

  • Formal training or certification in software engineering/architecture with applied experience in system design, application development, and operational stability .Advanced proficiency in one or more languages: Java, Python, C/C++, Node, or Golang 

  • Experience planning, designing, and implementing enterprise-level security solutions with fluent understanding of SDLC and agile methodologies (CI/CD, Application Resiliency) 

  • Practical cybersecurity experience in one or more disciplines: AI/ML, Application Development, Cloud, Infrastructure, Mobile, Offensive Security, or Vulnerability Management 

  • Extensive cloud-native experience (AWS, Azure, GCP) including Kubernetes, Lambda, ECS, S3, Aurora, API Gateway, and DevOps practices 

  • Experience in security assessment, threat modeling, and secure design for cloud-native applications, including A2A security, certificate management, API security, and service mesh architectures 

  • Expertise in IAM principles (RBAC, OAuth2.0, SCIM, WebAuthN, OPA, PBAC) with deep understanding of encryption, data security, and risk management 

  • Experience with CIS Security baselines, configuration drift remediation, and hands-on security architecture 

  • Proven experience building scalable microservices, enterprise-grade APIs, and high-availability database architectures (SQL, data modeling), with knowledge of streaming technologies (Kafka, RabbitMQ) .

  • Strong cross-functional influence, technical thought leadership, and ability to communicate complex concepts to senior executives.

  • Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.

  • Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

     

Preferred Qualifications, Capabilities, and Skills

  • Experience with threat modeling methodologies such as STRIDE, MITRE ATT&CK, VAST, DREAD, IriusRisk, and PASTA 

  • Experience with web, API, and microservices technologies including Web Applications, Web Services, and Service Oriented Architectures. Experience with Infrastructure as Code (IaC) utilizing tools such as Terraform 

  • Experience with cloud security platforms such as AWS, Azure, and Google Cloud. Familiarity with security frameworks such as NIST, ISO 27001, and SOC 2 

  • Proficiency in MCP and its application on how it can be used to secure agentic systems 

  • Experience with Vendor Product Management, Services, and Tooling 

  • Experience leading cross-functional security projects with strong communication and stakeholder management skills 

  • Strategic thinker with a proactive approach to problem-solving, strong organizational and project management skills, and a commitment to continuous learning and professional development 
  • Professional certifications such as CISSP, CISM, or CCSP . AWS certifications including Practitioner, Cloud Engineer, Software Development Engineer, Cloud Security Engineer, Cloud Security Architect, and Application Architect. Offensive Security certifications including OSCP, OSWP, OSCE, OSEE, OSWE, OSEP, and CEH