At a Glance
- Tasks: Lead cloud security initiatives and shape the future of cybersecurity at J.P. Morgan.
- Company: Join J.P. Morgan, a global leader in financial services with a commitment to diversity.
- Benefits: Competitive salary, inclusive culture, and opportunities for professional growth.
- Other info: Dynamic team environment with strong focus on mentorship and career development.
- Why this job: Make a real impact on global cloud security while working with cutting-edge technology.
- Qualifications: Experience in security engineering and proficiency in programming languages required.
The predicted salary is between 72000 - 88000 £ per year.
Join us to make a meaningful impact on the security of our global cloud infrastructure. As a Lead Cloud Security Engineer, you will help shape the future of cybersecurity and technology controls at JPMorgan Chase by establishing standardized control baselines and reusable patterns for AWS, Azure, and GCP.
Your responsibilities will include:
- Chairing or co-chairing governance forums, making informed risk acceptance decisions, and driving timely remediation, deviation tracking, and benefits realization.
- Partnering with senior leaders across engineering, product, and risk to embed “security by design,” ensuring deep integration with security operations, threat intelligence, IAM, network security, and data protection.
- Setting the operating model for infrastructure as code security: defining guardrails, policy as code, and automated pre-commit/pre-deploy controls; overseeing security reviews for Terraform and platform engineering pipelines.
- Establishing and maintaining authoritative documentation, standards, and playbooks; implementing agile delivery mechanisms for security programs at scale.
- Building, mentoring, and leading a high-performing matrixed team of security engineers and risk analysts; developing talent, clarifying accountabilities, and cultivating a culture of ownership and continuous improvement.
- Defining and reporting control effectiveness and residual risk through executive-ready dashboards; briefing senior stakeholders, audit, and regulators; ensuring audit readiness and sustainable evidence practices.
- Driving the tooling and automation strategy for cloud security, including build vs buy evaluations, vendor management, and integration with existing telemetry and SOAR platforms.
- Strengthening cloud incident preparedness and response by leading threat modeling, tabletop exercises, and post-incident reviews that translate lessons learned into control enhancements.
- Applying reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.
Required Qualifications, Capabilities, And Skills
- Formal training or certification on security engineering concepts and advanced applied experience.
- Skilled in planning, designing, and implementing enterprise-level security solutions.
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
- Advanced in one or more programming languages.
- Proficient across SDLC execution, including agile methodologies such as CI/CD, application resiliency, and security.
- Experience with threat modeling, discovery, vulnerability, and penetration testing.
Preferred Qualifications, Capabilities, And Skills
- Deep expertise securing public cloud at scale, spanning identity and access management, network segmentation, data protection, logging/monitoring, and native cloud services across AWS, Azure, and/or GCP.
- Proven leadership of cross-functional security programs with measurable outcomes; adept at influencing VP+ stakeholders and navigating complex prioritization across multiple platforms and business lines.
- Exceptional executive communication and stakeholder management skills, including experience engaging internal audit and external regulators with clear narratives, metrics, and remediation roadmaps.
- Demonstrated ability to translate policy and risk requirements into practical designs and policy as code guardrails that balance delivery velocity with control effectiveness.
- Hands-on familiarity with Terraform and infrastructure as code security, DevSecOps and CI/CD concepts, and enforcement frameworks within modern development workflows.
- Strong program execution under tight timelines; highly self-directed with a bias for action, ownership, and outcome orientation.
- Advanced cloud and security certifications are a plus; experience deploying and operating CSPM/CIEM/CWPP solutions is advantageous.
Lead Cloud Security Engineer employer: Archer
Archer is an exceptional employer located in the innovative hub of San Jose, California, where we are at the forefront of sustainable air mobility. Our collaborative work culture fosters diversity and creativity, providing employees with ample opportunities for professional growth and development in the aerospace industry. With a commitment to employee well-being and inclusivity, Archer offers a unique chance to contribute to groundbreaking technology while enjoying a supportive and dynamic workplace.
StudySmarter Expert Advice🤫
We think this is how you could land Lead Cloud Security Engineer
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Archer, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Archer
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Archer. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Lead Cloud Security Engineer
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Archer insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Archer that you’re committed to staying ahead in the game.
How to prepare for a job interview at Archer
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Archer to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Archer.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
