Sr Lead Security Engineer

Job description

As a Product Owner, Hardware Security at JPMorganChase within Cybersecurity and Technology Controls, you will own the product strategy, roadmap, and backlog for the firm’s hardware security control plane. You will sit at the intersection of infrastructure partners, architecture, and engineering to sequence how the firm governs trust in hardware and firmware across the device lifecycle. You will turn control outcomes into a deliverable backlog, represent internal customers (network, servers, employee compute, data center, integrators), and hold definition of done so the platform reduces hardware risk rather than accumulating tools.

Job responsibilities

• Define and execute the product vision and multi-quarter roadmap for hardware security, aligned to firm cybersecurity, technology-control, and regulatory obligations
• Own and prioritize the product backlog; write user stories and acceptance criteria; accept or reject increments against agreed definition of done
• Drive roadmap trade-offs across intake, operate, and decommission use cases, balancing risk reduction, operational feasibility, and partner adoption
• Partner with the Hardware Security Lead, architecture, and engineering to translate the trust model into sequenced delivery — without owning architecture or production operations
• Own work intake from infrastructure and security partners; assess, sequence, or decline requests against the roadmap
• Establish success metrics (adoption, time-to-decision, control evidence, operational use) and report product performance to stakeholders
• Support the investment case for subsequent increments: outcome, scope, explicit cuts
• Treat vendor capabilities as signal sources into the control plane rather than as standalone consoles
• Lead planning with engineering and architecture each cycle; keep work in the team’s system of record
• Engage and influence stakeholders across Cybersecurity, Infrastructure, Risk, and Control functions

Required qualifications, capabilities, and skills

• 10+ years of product ownership or product management experience delivering platforms consumed by other engineering or infrastructure teams
• 5+ years in cybersecurity, technology controls, infrastructure security, or an adjacent control domain
• Proven experience taking a control or platform product from limited production to adopted operational use
• Strong understanding of the product development lifecycle (discovery, requirements, roadmap, delivery, value measurement)
• Working knowledge of enterprise infrastructure (servers, network, data centers) and why firmware and hardware integrity sit below conventional security tooling
• Experience operating in a regulated environment, including data handling, vendor constraints, audit, and change control
• Demonstrated ability to influence senior stakeholders and decline work that does not serve the product
• Experience working with Scrum/Agile teams and standard delivery tools
• Excellent written and verbal communication, including executive-ready product narratives

• Bachelor’s degree or equivalent experience

Preferred qualifications, capabilities, and skills

• Direct experience in hardware supply-chain security, firmware assurance, cyber supply-chain risk management, or device trust
• Experience integrating third-party security tools into an internal control plane
• Prior role in financial services or similarly regulated critical infrastructure
• Familiarity with large-firm governance paths (architecture review, productionization, control evidence)
• People leadership of product owners or business analysts (not required if the candidate has owned a comparable platform solo)