Cybersecurity Architect III - Offensive Security, AWS

Join a team where your expertise as a security engineer is valued and your impact is recognized. Advance your career by contributing to innovative cybersecurity solutions in a dynamic environment.
As a Cybersecurity Architect III at JPMorgan Chase within the Cybersecurity and Technology Controls team, you collaborate with cross-functional teams to deliver robust cybersecurity architecture solutions. You communicate risk and mitigation options using industry best practices to support business objectives. You play a key role in shaping technology solutions and fostering a culture of growth and opportunity. You will help drive the security posture of the firm through your technical expertise and teamwork.
Job responsibilities
Perform analysis and reporting against security risks to protect data, applications, and infrastructure using modern tools
Conduct reviews on existing security controls with minimal oversight
Identify gaps in network architecture and create detailed documentation of threats and mitigations for small software applications
Collaborate with architects and cross-functional teams to implement technology solutions
Communicate risk and mitigation options using best practices in support of business objectives
Use enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, control review analysis, and security documentation, validating outputs and handling data according to sensitivity and security requirements
Apply reuse-first, AI-assisted patterns within SDLC/toolchain routines to improve security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations
Required qualifications, capabilities and skills
Formal training or certification on security engineering concepts and 3+ years applied experience
Proficient in Offensive security and AWS
Experience creating cybersecurity solutions based on existing security parameters
Ability to evaluate current cybersecurity technologies to recommend ways to optimize architecture
Hands-on practical experience in system design, application development, testing, and operational stability
Working knowledge of using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity
Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations
Strong working knowledge of information and network security, IT risk management, and architectural concepts and patterns
Overall knowledge of the Software Development Life Cycle
Solid understanding of agile methodologies such as continuous integration and delivery, application resiliency, and security
Demonstrated knowledge of software applications and technical processes within a technical discipline (e.g., public cloud, artificial intelligence, machine learning, mobile, etc.)
Preferred qualifications, capabilities and skills
Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field (or equivalent work experience)
Proficiency with Databricks
Strong knowledge of secure software development practices and common vulnerabilities (e.g., OWASP Top Ten)
Experience with threat modeling, risk assessment, and vulnerability management