> Markdown version of [/jobs/ext/4547010-lead-cybersecurity-architect](https://www.wearedevelopers.com/jobs/ext/4547010-lead-cybersecurity-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Cybersecurity Architect - **Company:** JPMorgan Chase & Co. - **Location:** Jersey City, NJ, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Antivirus, Architectural Patterns, User Authentication, Microsoft Azure, Microsoft Online Services, Software as a Service, Cloud Computing Security, Cyber Security, Continuous Delivery, Continuous Integration, Data Security, Identity and Access Management, Information Systems Security Architecture Professional, OAuth, Open Web Application Security, Systems Development Life Cycle, Azure Active Directory, Microsoft Copilot, Zero Trust Network Access, Microsoft SharePoint, Software Engineering, Data Streaming, Systems Integration, Data Logging, Google Cloud, Large Language Models, Software Security, Mitre Att&ck, HybridCloud, Microsoft Onedrive, Microsoft Fabric, Programming Languages - **Published:** November 3, 2026 - **Apply:** https://jpmc.fa.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1001/requisitions/preview/210793171 ## About the Role * Formal training or certification in cybersecurity architecture and 5+ years of applied experience. * Hands-on practical experience delivering enterprise-level cybersecurity architecture, solutions, and security controls across complex technology environments. * Demonstrated experience leading complex cybersecurity architecture initiatives and influencing technical decisions across engineering, product, architecture, risk, and business teams. * Advanced expertise in one or more programming languages and/or applications, with advanced knowledge of cybersecurity architecture and technical processes across one or more disciplines such as public cloud, SaaS, AI/ML, application security, or enterprise collaboration technologies. * Hands-on experience conducting and leading threat modeling, attack-surface analysis, security architecture assessments, and security design reviews. * Demonstrated ability to identify threats, control gaps, and cybersecurity risks and define scalable mitigation strategies, security patterns, and target-state solutions. * Strong understanding of modern cloud security concepts, including identity and access management, authentication and authorization, application and API security, data protection, logging and monitoring, external connectivity, and trust boundaries. * Ability to evaluate current and emerging technologies and define or influence future-state cybersecurity architecture and security strategy. * Ability to interpret complex architecture diagrams and data flows, evaluate control effectiveness, and communicate cybersecurity risks and recommendations to engineering, product, architecture, risk, and senior leadership stakeholders. * Ability to independently lead complex design, architecture, and security problems with minimal oversight and drive issues toward resolution. * Proficiency in automation, continuous delivery methods, and Software Development Life Cycle practices, with an understanding of Continuous Integration/Delivery, application resiliency, and security. * Demonstrated experience using enterprise-authorized AI capabilities to support cybersecurity architecture workflows, with strong validation practices and awareness of data sensitivity. * Ability to assess and validate AI-assisted security recommendations before adoption, escalate uncertainty, and ensure outcomes align with security, resiliency, traceability, and auditability expectations. Preferred qualifications, capabilities, and skills * Experience securing enterprise cloud and SaaS environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services. * Security architecture experience across major cloud platforms, including AWS, GCP, and Microsoft Azure, with an understanding of cloud-native security controls and shared responsibility models. * Experience evaluating SaaS integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective. * Experience with Microsoft 365 security architecture, including technologies such as Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, Microsoft Graph, Microsoft Purview, Microsoft Defender, and Microsoft Copilot. * Experience securing AI/ML and LLM-enabled applications, agents, and emerging AI capabilities, including risks associated with data access, permissions, external integrations, third-party model dependencies, and emerging agentic architectures. * Experience developing and driving adoption of security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and SaaS technologies. * Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles. * Experience providing technical leadership across complex, cross-functional cybersecurity initiatives involving multiple technology or business organizations. * Experience effectively communicating complex cybersecurity architecture, risk, and technical recommendations to senior technology and business leaders. * Knowledge of financial services technology environments and the cybersecurity, resiliency, and risk considerations associated with operating at enterprise scale. ## Description * Defines and influences cybersecurity architecture strategy and target-state security patterns across enterprise Collaboration & Communication technologies, cloud platforms, SaaS services, Microsoft 365, AI-enabled capabilities, and strategic technology integrations. * Engages technical teams and senior business stakeholders to evaluate and recommend technical approaches that address current and future cybersecurity needs. * Leads cybersecurity architecture and design reviews for complex and strategic technology initiatives, identifying threats, attack paths, control gaps, and cybersecurity risks and driving appropriate mitigation strategies. * Leads threat modeling, attack-surface analysis, and security architecture assessments across applications, platforms, integrations, and emerging technologies. * Evaluates cybersecurity risks associated with third-party integrations, APIs, application permissions, authentication and authorization patterns, data flows, external connectivity, and trust boundaries. * Assesses existing security controls and defines practical mitigation strategies, compensating controls, and reusable security patterns and control baselines where identified threats are not sufficiently mitigated. * Leads evaluation sessions with external vendors, technology providers, and internal teams to assess cybersecurity architecture, technical capabilities, security controls, and applicability within the firm's technology environment. * Partners with engineering, product, architecture, and risk teams to translate cybersecurity findings into actionable remediation plans and drive complex issues toward resolution or appropriate risk escalation. * Identifies opportunities to eliminate, automate, or prevent recurring cybersecurity issues through scalable controls, reusable architecture patterns, tooling, and security-by-design practices. * Provides technical leadership and direction across teams and serves as a function-wide subject matter expert for complex cybersecurity architecture decisions. * Leads and contributes to communities of practice that advance cybersecurity architecture standards, frameworks, tools, reusable patterns, and adoption of emerging security technologies. * Actively contributes to the engineering community as an advocate for firmwide frameworks, tools, and Software Development Life Cycle practices. * Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis, architecture assessment, and control validation, while validating outputs and handling data according to sensitivity and security requirements. * Drives reuse-first adoption of AI-assisted security validation within SDLC and security toolchain processes to improve control testing, remediation quality, traceability, auditability, and resiliency.