JPMorganChase Logo

JPMorganChase

Sr Lead Security Engineer

Posted 2 Hours Ago
Be an Early Applicant
Hybrid
Plano, TX
Senior level
Hybrid
Plano, TX
Senior level
Own the product strategy, roadmap, backlog, and delivery outcomes for a hardware security control plane. Translate cybersecurity and regulatory requirements into prioritized product increments, acceptance criteria, success metrics, and control evidence. Partner with infrastructure, architecture, engineering, risk, and control stakeholders while managing intake, vendor capabilities, adoption, and roadmap trade-offs. The role requires deep product ownership experience, cybersecurity expertise, regulated-environment knowledge, and strong executive communication.
The summary above was generated by AI

Job description

As a Product Owner, Hardware Security at JPMorganChase within Cybersecurity and Technology Controls, you will own the product strategy, roadmap, and backlog for the firm’s hardware security control plane. You will sit at the intersection of infrastructure partners, architecture, and engineering to sequence how the firm governs trust in hardware and firmware across the device lifecycle. You will turn control outcomes into a deliverable backlog, represent internal customers (network, servers, employee compute, data center, integrators), and hold definition of done so the platform reduces hardware risk rather than accumulating tools.

Job responsibilities

  • Define and execute the product vision and multi-quarter roadmap for hardware security, aligned to firm cybersecurity, technology-control, and regulatory obligations
  • Own and prioritize the product backlog; write user stories and acceptance criteria; accept or reject increments against agreed definition of done
  • Drive roadmap trade-offs across intake, operate, and decommission use cases, balancing risk reduction, operational feasibility, and partner adoption
  • Partner with the Hardware Security Lead, architecture, and engineering to translate the trust model into sequenced delivery — without owning architecture or production operations
  • Own work intake from infrastructure and security partners; assess, sequence, or decline requests against the roadmap
  • Establish success metrics (adoption, time-to-decision, control evidence, operational use) and report product performance to stakeholders
  • Support the investment case for subsequent increments: outcome, scope, explicit cuts
  • Treat vendor capabilities as signal sources into the control plane rather than as standalone consoles
  • Lead planning with engineering and architecture each cycle; keep work in the team’s system of record
  • Engage and influence stakeholders across Cybersecurity, Infrastructure, Risk, and Control functions

Required qualifications, capabilities, and skills

  • 10+ years of product ownership or product management experience delivering platforms consumed by other engineering or infrastructure teams
  • 5+ years in cybersecurity, technology controls, infrastructure security, or an adjacent control domain
  • Proven experience taking a control or platform product from limited production to adopted operational use
  • Strong understanding of the product development lifecycle (discovery, requirements, roadmap, delivery, value measurement)
  • Working knowledge of enterprise infrastructure (servers, network, data centers) and why firmware and hardware integrity sit below conventional security tooling
  • Experience operating in a regulated environment, including data handling, vendor constraints, audit, and change control
  • Demonstrated ability to influence senior stakeholders and decline work that does not serve the product
  • Experience working with Scrum/Agile teams and standard delivery tools
  • Excellent written and verbal communication, including executive-ready product narratives
  • Bachelor’s degree or equivalent experience


Preferred qualifications, capabilities, and skills

  • Direct experience in hardware supply-chain security, firmware assurance, cyber supply-chain risk management, or device trust
  • Experience integrating third-party security tools into an internal control plane
  • Prior role in financial services or similarly regulated critical infrastructure
  • Familiarity with large-firm governance paths (architecture review, productionization, control evidence)
  • People leadership of product owners or business analysts (not required if the candidate has owned a comparable platform solo)
About Us
JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. 

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About the TeamOur professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.

JPMorganChase San Francisco, California, USA Office

San Francisco, CA, United States

Similar Jobs

Yesterday
Hybrid
Senior level
Senior level
Financial Services
Leads software engineering for secure, scalable security platforms in a regulated banking environment. Responsibilities include designing, developing, testing, debugging, and operating production systems; guiding engineers and vendors; governing AI-assisted development practices; validating AI outputs for security and performance; applying cloud-native technologies; and influencing architecture, technical operations, and engineering standards.
Top Skills: Ai-Assisted Software Development ToolsCloud-Native TechnologiesDevsecopsDockerKubernetesSoftware Development Lifecycle Automation
9 Days Ago
Hybrid
Senior level
Senior level
Financial Services
Leads enterprise cryptography, PKI, key management, and data protection strategy. Designs HSM and KMS integrations, encryption architectures, certificate automation, lifecycle controls, and post-quantum migration plans. Partners with engineering teams on secure libraries, threat modeling, security testing, vulnerability remediation, and shift-left security practices. Advises senior stakeholders on cybersecurity risks and mentors teams while ensuring systems are reliable, observable, auditable, and resilient.
Top Skills: CryptographyDynamic Application Security Testing (Dast)Hardware Security Modules (Hsm)JavaKey Management Services (Kms)Mutual Tls (Mtls)Policy-As-CodePublic Key Infrastructure (Pki)Secrets ManagementStatic Application Security Testing (Sast)Transport Layer Security (Tls)
23 Days Ago
Hybrid
Senior level
Senior level
Financial Services
Build and operate security services and guardrails for AI and machine learning workloads on AWS. Develop production Python code, design cloud security controls, manage Terraform infrastructure, lead technical designs and vendor evaluations, and ensure reliable, scalable implementations. The role also addresses generative AI misuse through input validation, abuse detection, identity and access controls, encryption, logging, monitoring, and policy enforcement.
Top Skills: Amazon Web Services (Aws)Artificial IntelligenceCi/CdGenerative AiInfrastructure AutomationMachine LearningPythonTerraform

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account