J

JP Morgan Chase

Runs a consumer bank and an investment bank

Lead Security Engineer

Security Engineering & ArchitecturePosted on Nov 10
Full-timeJersey City, NJ, USA$156.8k - $215kIn-person

About the Job

Requirements

  • At least 5 years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
  • Deep expertise in email security technologies, including secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards such as SPF, DKIM, and DMARC.
  • Experience designing, implementing, and operating enterprise-scale security architectures within highly regulated environments.
  • Advanced knowledge of software engineering, application development, and technical disciplines such as cloud computing, artificial intelligence, machine learning, or related technologies.
  • Experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
  • Advanced proficiency in one or more programming or automation languages, with the ability to solve complex technical problems independently.
  • Experience leveraging enterprise-authorized AI capabilities in engineering workflows, including validating AI-assisted recommendations and maintaining awareness of data sensitivity, resiliency, and audit requirements.
  • Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
  • Ability to lead large cross-functional initiatives involving Cybersecurity, Infrastructure, Engineering, Risk, Compliance, Audit, Vendor Management, and business organizations.
  • Experience presenting technical strategies, risks, business cases, roadmaps, metrics, investment recommendations, and program status to senior leadership.
  • Ability to build consensus, drive decisions, balance strategic priorities, and deliver measurable risk-reduction outcomes across diverse stakeholder groups.

Responsibilities

  • Lead the strategy, architecture, engineering, and lifecycle management of enterprise email security platforms that protect critical business communications.
  • Define and drive the roadmap for email security capabilities, including secure email gateways, phishing protection, threat detection and response, encryption, data loss prevention, and cloud-based security services.
  • Serve as the technical authority for email security architecture, ensuring solutions align with cybersecurity, resiliency, regulatory, and multi-level security requirements.
  • Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify security requirements, and manage security risk.
  • Lead complex engineering and modernization initiatives from concept through deployment, including proof-of-value evaluations, migrations, technology upgrades, and platform transformations.
  • Drive incident response, threat analysis, risk assessments, and remediation activities related to phishing, business email compromise, malicious campaigns, and emerging email-borne threats.
  • Establish metrics, key performance indicators, and reporting that demonstrate platform effectiveness, threat reduction, operational performance, resiliency, and business value.
  • Develop executive-level presentations, strategy papers, management updates, and governance communications for senior leadership, risk committees, and oversight forums.
  • Manage vendor relationships and drive accountability for product roadmaps, operational performance, risk remediation, and contractual commitments.
  • Mentor and lead engineering teams while fostering innovation, operational excellence, continuous improvement, and effective resource management during disruptive events.
  • Use enterprise-authorized AI capabilities and reuse-first engineering practices to accelerate security analysis, testing, control validation, and documentation while ensuring data protection, auditability, and compliance.

Desired Qualifications

  • Experience securing Microsoft 365, Exchange Online, Local Exchange/Outlook, and similar enterprise email security platforms.
  • Experience leading large-scale email security transformation or modernization initiatives.
  • CISSP, CCSP, CISM, or equivalent industry certifications.
  • Experience within financial services, banking, or another highly regulated industry.
  • Experience supporting regulatory examinations, internal audits, and third-party risk assessments.
  • Familiarity with AI-driven security operations, threat detection, and email risk analytics.

About the Company

JP Morgan Chase

Runs a consumer bank and an investment bank

JPMorgan Chase runs the largest bank in the United States, which serves households and small businesses as Chase and large companies, governments, and investors as J.P. Morgan. During the 2008 financial crisis it bought the failing investment bank Bear Stearns and lender Washington Mutual, and in 2023 it took over First Republic Bank after regulators seized it. Chase takes deposits and earns interest on credit cards, mortgages, and car loans, while the investment side earns fees for advising on mergers, raising money for companies, trading stocks and bonds, and managing wealth. Formed in a 2000 merger, JPMorgan Chase traces its roots to 1799 and is based in New York City.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
1799

Recently Posted Jobs

Explore more opportunities at JP Morgan Chase

See more jobs