JPMorganChase Logo

JPMorganChase

Sr Lead Security Engineer

Posted 49 Minutes Ago
Be an Early Applicant
Hybrid
Plano, TX
Senior level
Hybrid
Plano, TX
Senior level
Own the product strategy, roadmap, backlog, and delivery outcomes for a hardware security control plane. Translate cybersecurity and regulatory requirements into prioritized product increments, acceptance criteria, success metrics, and control evidence. Partner with infrastructure, architecture, engineering, risk, and control stakeholders while managing intake, vendor capabilities, adoption, and roadmap trade-offs. The role requires deep product ownership experience, cybersecurity expertise, regulated-environment knowledge, and strong executive communication.
The summary above was generated by AI

Job description

As a Product Owner, Hardware Security at JPMorganChase within Cybersecurity and Technology Controls, you will own the product strategy, roadmap, and backlog for the firm’s hardware security control plane. You will sit at the intersection of infrastructure partners, architecture, and engineering to sequence how the firm governs trust in hardware and firmware across the device lifecycle. You will turn control outcomes into a deliverable backlog, represent internal customers (network, servers, employee compute, data center, integrators), and hold definition of done so the platform reduces hardware risk rather than accumulating tools.

Job responsibilities

  • Define and execute the product vision and multi-quarter roadmap for hardware security, aligned to firm cybersecurity, technology-control, and regulatory obligations
  • Own and prioritize the product backlog; write user stories and acceptance criteria; accept or reject increments against agreed definition of done
  • Drive roadmap trade-offs across intake, operate, and decommission use cases, balancing risk reduction, operational feasibility, and partner adoption
  • Partner with the Hardware Security Lead, architecture, and engineering to translate the trust model into sequenced delivery — without owning architecture or production operations
  • Own work intake from infrastructure and security partners; assess, sequence, or decline requests against the roadmap
  • Establish success metrics (adoption, time-to-decision, control evidence, operational use) and report product performance to stakeholders
  • Support the investment case for subsequent increments: outcome, scope, explicit cuts
  • Treat vendor capabilities as signal sources into the control plane rather than as standalone consoles
  • Lead planning with engineering and architecture each cycle; keep work in the team’s system of record
  • Engage and influence stakeholders across Cybersecurity, Infrastructure, Risk, and Control functions

Required qualifications, capabilities, and skills

  • 10+ years of product ownership or product management experience delivering platforms consumed by other engineering or infrastructure teams
  • 5+ years in cybersecurity, technology controls, infrastructure security, or an adjacent control domain
  • Proven experience taking a control or platform product from limited production to adopted operational use
  • Strong understanding of the product development lifecycle (discovery, requirements, roadmap, delivery, value measurement)
  • Working knowledge of enterprise infrastructure (servers, network, data centers) and why firmware and hardware integrity sit below conventional security tooling
  • Experience operating in a regulated environment, including data handling, vendor constraints, audit, and change control
  • Demonstrated ability to influence senior stakeholders and decline work that does not serve the product
  • Experience working with Scrum/Agile teams and standard delivery tools
  • Excellent written and verbal communication, including executive-ready product narratives
  • Bachelor’s degree or equivalent experience


Preferred qualifications, capabilities, and skills

  • Direct experience in hardware supply-chain security, firmware assurance, cyber supply-chain risk management, or device trust
  • Experience integrating third-party security tools into an internal control plane
  • Prior role in financial services or similarly regulated critical infrastructure
  • Familiarity with large-firm governance paths (architecture review, productionization, control evidence)
  • People leadership of product owners or business analysts (not required if the candidate has owned a comparable platform solo)
About Us
JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. 

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About the TeamOur professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.

Similar Jobs

Yesterday
Hybrid
Senior level
Senior level
Financial Services
Leads software engineering for secure, scalable security platforms in a regulated banking environment. Responsibilities include designing, developing, testing, debugging, and operating production systems; guiding engineers and vendors; governing AI-assisted development practices; validating AI outputs for security and performance; applying cloud-native technologies; and influencing architecture, technical operations, and engineering standards.
Top Skills: Ai-Assisted Software Development ToolsCloud-Native TechnologiesDevsecopsDockerKubernetesSoftware Development Lifecycle Automation
9 Days Ago
Hybrid
Senior level
Senior level
Financial Services
Leads enterprise cryptography, PKI, key management, and data protection strategy. Designs HSM and KMS integrations, encryption architectures, certificate automation, lifecycle controls, and post-quantum migration plans. Partners with engineering teams on secure libraries, threat modeling, security testing, vulnerability remediation, and shift-left security practices. Advises senior stakeholders on cybersecurity risks and mentors teams while ensuring systems are reliable, observable, auditable, and resilient.
Top Skills: CryptographyDynamic Application Security Testing (Dast)Hardware Security Modules (Hsm)JavaKey Management Services (Kms)Mutual Tls (Mtls)Policy-As-CodePublic Key Infrastructure (Pki)Secrets ManagementStatic Application Security Testing (Sast)Transport Layer Security (Tls)
23 Days Ago
Hybrid
Senior level
Senior level
Financial Services
Build and operate security services and guardrails for AI and machine learning workloads on AWS. Develop production Python code, design cloud security controls, manage Terraform infrastructure, lead technical designs and vendor evaluations, and ensure reliable, scalable implementations. The role also addresses generative AI misuse through input validation, abuse detection, identity and access controls, encryption, logging, monitoring, and policy enforcement.
Top Skills: Amazon Web Services (Aws)Artificial IntelligenceCi/CdGenerative AiInfrastructure AutomationMachine LearningPythonTerraform

What you need to know about the Austin Tech Scene

Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.

Key Facts About Austin Tech

  • Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
  • Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
  • Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
  • Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account