Cybersecurity Architect III - Offensive Security, AWS

Join a team where your expertise as a security engineer is valued and your impact is recognized. Advance your career by contributing to innovative cybersecurity solutions in a dynamic environment.

As a Cybersecurity Architect III at JPMorgan Chase within the Cybersecurity and Technology Controls team, you collaborate with cross-functional teams to deliver robust cybersecurity architecture solutions. You communicate risk and mitigation options using industry best practices to support business objectives. You play a key role in shaping technology solutions and fostering a culture of growth and opportunity. You will help drive the security posture of the firm through your technical expertise and teamwork.

Job responsibilities

• Perform analysis and reporting against security risks to protect data, applications, and infrastructure using modern tools
• Conduct reviews on existing security controls with minimal oversight
• Identify gaps in network architecture and create detailed documentation of threats and mitigations for small software applications
• Collaborate with architects and cross-functional teams to implement technology solutions
• Communicate risk and mitigation options using best practices in support of business objectives
• Use enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, control review analysis, and security documentation, validating outputs and handling data according to sensitivity and security requirements
• Apply reuse-first, AI-assisted patterns within SDLC/toolchain routines to improve security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations

Required qualifications, capabilities and skills

• Formal training or certification on security engineering concepts and 3+ years applied experience
• Proficient in Offensive security and AWS
• Experience creating cybersecurity solutions based on existing security parameters
• Ability to evaluate current cybersecurity technologies to recommend ways to optimize architecture
• Hands-on practical experience in system design, application development, testing, and operational stability
• Working knowledge of using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations
• Strong working knowledge of information and network security, IT risk management, and architectural concepts and patterns
• Overall knowledge of the Software Development Life Cycle
• Solid understanding of agile methodologies such as continuous integration and delivery, application resiliency, and security
• Demonstrated knowledge of software applications and technical processes within a technical discipline (e.g., public cloud, artificial intelligence, machine learning, mobile, etc.)

Preferred qualifications, capabilities and skills

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field (or equivalent work experience)
• Proficiency with Databricks
• Strong knowledge of secure software development practices and common vulnerabilities (e.g., OWASP Top Ten)
• Experience with threat modeling, risk assessment, and vulnerability management