Lead Security Engineer

JPMorgan Chase & Co. • Jersey City, NJ

3h • $156,750 - $215,000

About The Position

As a Senior Lead Security Engineer within JPMorganChase’s CTC, you will help an agile team deliver software solutions that meet functional and user requirements while preventing misuse, circumvention, and malicious behavior. You will apply deep technical expertise and problem-solving skills to cybersecurity challenges across multiple technology domains, with a focus on enterprise email security.

You will lead the strategy, architecture, engineering, and lifecycle management of enterprise email security platforms, and define the roadmap for capabilities such as secure email gateways, phishing protection, threat detection and response, encryption, data loss prevention, and cloud-based security services. As a technical authority, you will ensure solutions meet cybersecurity, resiliency, regulatory, and multi-level security requirements.

The role partners with Cyber, Technology, Risk, Compliance, Audit, vendors, and business stakeholders to assess threats and manage risk. You will lead modernization initiatives, incident response and remediation, establish performance and risk-reduction metrics, communicate strategies and status to senior leaders, and mentor engineering teams. Enterprise-authorized AI and reuse-first engineering practices are used to accelerate security work while maintaining data protection, auditability, and compliance.

Requirements

• At least 5 years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
• Deep expertise in email security technologies, including secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards such as SPF, DKIM, and DMARC.
• Proven experience designing, implementing, and operating enterprise-scale security architectures in highly regulated environments.
• Advanced knowledge of software engineering, application development, and technical disciplines such as cloud computing, artificial intelligence, or machine learning.
• Strong experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
• Advanced proficiency in one or more programming or automation languages and ability to solve complex technical problems independently.
• Demonstrated experience using enterprise-authorized AI capabilities in engineering workflows, validating AI-assisted recommendations, and accounting for data sensitivity, resiliency, and audit requirements.
• Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
• Demonstrated ability to lead large cross-functional initiatives involving Cybersecurity, Infrastructure, Engineering, Risk, Compliance, Audit, Vendor Management, and business organizations.
• Strong executive communication skills, including presenting technical strategies, risks, business cases, roadmaps, metrics, investment recommendations, and program status to senior leadership.
• Exceptional leadership, influence, and problem-solving skills, including the ability to build consensus, drive decisions, balance strategic priorities, and deliver measurable risk-reduction outcomes.

Nice To Haves

• Experience securing Microsoft 365, Exchange Online, Local Exchange/Outlook, or similar enterprise email security platforms.
• Experience leading large-scale email security transformation or modernization initiatives.
• CISSP, CCSP, CISM, or equivalent industry certifications.
• Experience in financial services, banking, or another highly regulated industry.
• Experience supporting regulatory examinations, internal audits, and third-party risk assessments.
• Familiarity with AI-driven security operations, threat detection, and email risk analytics.

Responsibilities

• Lead the strategy, architecture, engineering, and lifecycle management of enterprise email security platforms.
• Define and drive the roadmap for email security capabilities, including secure email gateways, phishing protection, threat detection and response, encryption, data loss prevention, and cloud-based security services.
• Serve as the technical authority for email security architecture and ensure alignment with cybersecurity, resiliency, regulatory, and multi-level security requirements.
• Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify security requirements, and manage security risk.
• Lead complex engineering and modernization initiatives from concept through deployment, including proof-of-value evaluations, migrations, technology upgrades, and platform transformations.
• Drive incident response, threat analysis, risk assessments, and remediation related to phishing, business email compromise, malicious campaigns, and emerging email-borne threats.
• Establish metrics, KPIs, and reporting to demonstrate platform effectiveness, threat reduction, operational performance, resiliency, and business value.
• Develop executive presentations, strategy papers, management updates, and governance communications for senior leadership, risk committees, and oversight forums.
• Manage vendor relationships and drive accountability for product roadmaps, operational performance, risk remediation, and contractual commitments.
• Mentor and lead engineering teams while fostering innovation, operational excellence, continuous improvement, and effective resource management during disruptive events.
• Use enterprise-authorized AI capabilities and reuse-first engineering practices to accelerate security analysis, testing, control validation, and documentation while ensuring data protection, auditability, and compliance.

Benefits

• Competitive total rewards package, including base salary determined by role, experience, skill set, and location.
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity.
• Comprehensive health care coverage.
• On-site health and wellness centers.
• Retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support.
• Financial coaching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed