Senior Product Security Lead - NVIDIA Jetson

Responsibilities

• Oversee and guide the entire product security strategy and roadmap for Jetson, L4T, and JetPack—from initial architecture and development through rollout and post-launch support—while establishing well-defined product-level security mandates, structural principles, release benchmarks, and lifecycle methodologies.
• Embed secure-by-design principles across firmware, boot software, the Linux kernel, device drivers, system software, containers, and platform services by providing hands-on security engineering mentorship and partnering with silicon, firmware, manufacturing, and platform-security teams on core capabilities (e.g.,…
• Lead threat analysis and vulnerability assessments—including TAVA, threat modeling, risk analysis, attack-surface analysis, and security architecture reviews—while coordinating the triage and resolution of security findings with NVIDIA PSIRT and engineering teams to assess impact, prioritize risk, and drive mitigations…
• Support NVIDIA and customer readiness for cybersecurity regulations, such as the EU CRA, by identifying technical gaps and coordinating evidence. Clarify shared responsibilities and work closely with legal, compliance, and cybersecurity teams on regulatory interpretation.
• Coordinate the creation and upkeep of product-security materials, including SBOMs, security white papers, secure-deployment mentorship, vulnerability-management documentation, and customer-facing security collateral.
• Serve as the primary product-security contact for Jetson engineering teams, program management, NVIDIA PSIRT, internal application teams, and selected strategic customers and partners.
• Develop scalable processes, reusable mentorship, and foundational security standards to align multiple development teams.
• Define and track operational metrics covering vulnerability response, security-requirement coverage, remediation progress, security collateral generation, and overall product-release readiness.
• What we need to see
• Bachelor’s or Master’s degree, or equivalent experience, in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a related field. Applicants must have 12+ years in security engineering. At least 3 years should be in product-security, platform-security, security-architecture, or technical leadership.

Languages