Lead Security Engineer

Benefits that support your wellbeing and long-term security. JPMorgan

Chase offers health care coverage, on-site health and wellness centers, retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching.

As a Lead Security Engineer in Jersey City, NJ (onsite), you will lead enterprise email security strategy and execution within CTC. You will drive the end-to-end roadmap for protecting critical business communications, modernizing capabilities across regulated environments, and managing security risk through lifecycle management and incident response.

• Lead strategy, architecture, engineering, and lifecycle management for enterprise email security platforms that safeguard business communications.
• Define and drive the email security roadmap, including secure email gateways, phishing protection, threat detection and response, encryption, and data loss prevention (DLP), plus cloud-based security services.
• Act as the technical authority for email security architecture, ensuring alignment with cybersecurity, resiliency, regulatory expectations, and multi-level security requirements.
• Partner with Cyber, Technology, Risk, Compliance, Audit, and business stakeholders to assess threats, prioritize investments, clarify requirements, and manage security risk.
• Own complex engineering and modernization efforts from concept through deployment, including proof-of-value evaluations, migrations, technology upgrades, and platform transformations.
• Lead incident response and remediation for phishing, business email compromise (BEC), malicious campaigns, and emerging email-borne threats.
• Establish metrics, KPIs, and reporting to demonstrate platform effectiveness, threat reduction, operational performance, resiliency, and business value.
• Create executive-ready communication, including strategy papers, management updates, and governance materials for senior leadership and oversight forums.
• Manage vendor relationships and drive accountability for roadmaps, operational performance, risk remediation, and contractual commitments.
• Mentor and lead engineering teams while fostering innovation, operational excellence, and continuous improvement during disruptive events.
• Use enterprise-authorized AI capabilities and reuse-first engineering practices to accelerate security analysis, testing, control validation, and documentation, while maintaining data protection, auditability, and compliance.

• 5+ years of cybersecurity experience, including significant experience leading enterprise email security programs and engineering teams.
• Deep expertise in email security technologies, including secure email gateways, phishing protection, threat detection, encryption, cloud email security platforms, and email authentication standards such as SPF, DKIM, and DMARC.
• Proven experience designing, implementing, and operating enterprise-scale security architectures within highly regulated environments.
• Advanced knowledge across software engineering and technical disciplines such as cloud computing, artificial intelligence, machine learning, or related technologies.
• Strong experience with threat modeling, vulnerability assessments, penetration testing, risk analysis, and security control validation.
• Advanced proficiency in one or more programming or automation languages to solve complex technical problems independently.
• Demonstrated experience leveraging enterprise-authorized AI in engineering workflows, including validating AI-assisted recommendations and meeting data sensitivity, resiliency, and audit requirements.
• Strong understanding of cybersecurity frameworks, risk management practices, regulatory expectations, and audit requirements.
• Ability to lead large…