Lead Cybersecurity Architect
On-siteBengaluru, Karnataka, India
Job Summary
Conduct secure design reviews and threat modeling with application teams to ensure products are secure by design. Partner with engineering, product, and business stakeholders to align solutions with regulatory and audit expectations while supporting Chase UK and JPMorgan Personal Investing. Leverage enterprise-authorized AI capabilities to accelerate architecture analysis and decisioning, validating outputs against sensitivity requirements. Drive reuse-first adoption of AI-assisted security validation within SDLC routines to improve control testing quality and traceability. Serve as the subject matter expert for Cybersecurity and Technology Controls, sharing best practices and managing technology risk for vendors across cloud computing and emerging technologies.
Required Qualifications
- Formal training or certification on security engineering concepts
- 5+ years applied experience
- Advanced knowledge of cybersecurity architecture, applications, and technical processes
- Expertise in one or more technical disciplines
- Ability to design and implement effective cybersecurity and technology controls
- Strong knowledge of security best practices and DevSecOps methodologies
- Experience with cloud security posture management and vulnerability management
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations
- Understanding of network security, network design, segmentation, firewalls, and cloud networking patterns
- Experience implementing and reviewing authentication and authorization controls and best practices
- Hands-on experience in software development with strong understanding of SDLC and secure SDLC practices
- Knowledge of modern application architectures including microservices, APIs, and event-driven patterns
Desired Qualifications
- Experience with identity federation, least privilege, RBAC/ABAC concepts
- Experience with cloud security technologies and emerging security trends
- Ability to influence and partner across product supply chains
- Experience working with Third Party Oversight teams and managing vendor technology risk
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.