> Markdown version of [/jobs/ext/3403201-lead-security-engineer-cloud-threat-hunting](https://www.wearedevelopers.com/jobs/ext/3403201-lead-security-engineer-cloud-threat-hunting). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Security Engineer - Cloud Threat Hunting

- **Company:** JPMorgan Chase & Co.
- **Location:** United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Big Data, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Software Documentation, Cyber Security, Query Languages, Intrusion Detection and Prevention, Cloud Services, Kusto Query Language, SQL Databases, Google Cloud, Cloud Platform System, Cyber Threat Analysis, Cloudformation, Cybercrime, Terraform, Prisma Cloud Platform, Splunk
- **Published:** September 10, 2026
- **Apply:** https://jpmc.fa.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1001/requisitions/preview/210783280

## About the Role

* Formal training or certification on cybersecurity concepts and 5+ years applied experience (e.g., Security+, CEH, CCSP, CISSP, or equivalent)
 * Hands-on cloud-native experience across one or more major cloud platforms (AWS, Azure, or Google Cloud), including relevant cloud security certification
 * Demonstrated experience with threat modeling methodologies and delivering risk-based security assessments
 * Experience with cloud security posture management tooling (e.g., Wiz, Prisma Cloud, CrowdStrike Falcon, or equivalent)
 * Knowledge of infrastructure-as-code frameworks (e.g., Terraform, CloudFormation, or equivalent) and their security implications
 * Ability to lead cross-functional security initiatives and drive outcomes without direct authority
 * Strong prioritization skills with a risk-based approach to decision-making across competing demands
 * Ability to think beyond conventional approaches to build innovative solutions and break down complex technical problems, * Experience in offensive security disciplines including penetration testing, red teaming, or purple teaming
 * Proficiency with at least one query language used for threat detection and hunting (e.g., KQL, Splunk SPL, or SQL), with comfort working across large and complex datasets
 * Experience working within agile delivery frameworks and contributing to security program documentation at an enterprise level

## Description

As a Lead Cybersecurity Architect at JPMorganChase within the Cybersecurity & Technology Controls group, you will be at the forefront of securing the firm's public cloud adoption - ensuring that cloud platforms, services, and applications are designed, deployed, and operated in a secure and compliant manner. You will partner across engineering, product, and risk teams to embed security into the fabric of cloud architecture, translating complex threat landscapes into actionable, scalable controls. This is a high-impact role where your expertise will directly shape the firm's cloud security posture and resilience., * Partner with stakeholders across product, engineering, and risk and controls teams to understand firm control requirements, recommend implementations across a broad range of cloud architectures, and ensure secure-by-design principles are embedded throughout

 * Develop, plan, and execute hypothesis-driven, cloud-focused threat hunts, translating findings into actionable security outcomes including detection rules, alert tuning, and compensating controls
 * Apply specialized tooling to query, analyze, correlate, and interpret large datasets to identify potential threats and emerging risk patterns
 * Deliver threat models and risk-based assessments of cloud services, cloud platforms, and cloud-based applications to inform architecture and engineering decisions
 * Perform security reviews of infrastructure-as-code for cloud platform development, ensuring alignment with firm standards and industry best practices
 * Develop preventive and detective controls to enforce control requirements across cloud environments at enterprise scale
 * Interface with broader cybersecurity teams to ensure platform integration with security operations, threat intelligence, and incident response - operationalizing detections, improving triage playbooks, and supporting cloud threat investigations
 * Provide expert guidance on the cloud threat landscape, adversary tradecraft, and emerging risks to inform strategic security decisions
 * Contribute to documentation and agile processes in support of security programs, driving consistency and repeatability across the team


## Related Videos

- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)