Role at a glance
- Salary
- Not yet verified Check the description for pay details; an amount or pay period has not been verified.
- Location
- Santa Clara, California, United States
- Work arrangement
- On-site
- Employment
- Full-time
- Experience
- Senior Level Applicants must have 12+ years in security engineering. At least 3 years should be in product-security, platform-security, security-architecture, or technical leadership.
- Education
- Bachelor’s or Master’s degree, or equivalent experience, in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a...
Spotted an issue?
We’ll check it against the original posting.
Role Summary
The Senior Product Security Lead directs product-security strategy and delivery for NVIDIA Jetson, Linux for Tegra (L4T), and JetPack across their lifecycles. The role coordinates security work across engineering teams and works with customers and internal partners on product security and production readiness.
What You'll Do
- Set product-security strategy, roadmap, security mandates, release benchmarks, and lifecycle methods for Jetson, L4T, and JetPack.
- Guide secure-by-design engineering across firmware, boot software, the Linux kernel, device drivers, system software, containers, and...
- Lead threat analysis, vulnerability assessments, security architecture reviews, and coordination of security findings through mitigation.
- Support cybersecurity-regulation readiness by identifying technical gaps, coordinating evidence, and working with legal, compliance, and...
- Coordinate product-security materials, including SBOMs, security white papers, vulnerability-management documentation, and...
- Develop scalable security processes and standards, serve as a product-security contact for teams and selected customers, and track...
Generated from the employer's posting. Verify important details before applying.
View full postingQualifications
Bachelor’s or Master’s degree, or equivalent experience, in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a related field; 12+ years in security engineering, including at least 3 years in product security, platform security, security architecture, or technical leadership. Experience securing complex embedded, Linux, robotics, edge-computing, automotive, or system-on-chip platforms, with knowledge of firmware, bootloaders, kernels, device drivers, system services, and containers. Requires knowledge of platform-security fundamentals; practical experience with threat modeling, architecture reviews, vulnerability assessments, risk analysis, and security requirements; experience integrating security into the software development lifecycle; ability to lead across organizations; and strong written and verbal communication.
Required
- Bachelor’s or Master’s degree, or equivalent experience, in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a...
- 12+ years in security engineering, including at least 3 years in product security, platform security, security architecture, or...
- Experience securing complex embedded, Linux, robotics, edge-computing, automotive, or system-on-chip platforms, and a strong...
- Knowledge of secure boot, roots of trust, trusted execution, key management, cryptography, secure provisioning, debug protection, and...
- Practical experience with threat modeling, security architecture reviews, vulnerability assessments, risk analysis, and...
- Experience integrating security practices into the software development lifecycle, including code analysis, dependency management,...
- Ability to lead and influence across organizations without direct authority in a global engineering environment with competing product...
- Excellent written and verbal communication skills, including explaining complex security risks to engineers, executives, customers, and...
Preferred
- Hands-on experience with NVIDIA Jetson, Tegra, L4T, JetPack, or similar ARM-based embedded platforms within robotics, industrial...
- Experience with CRA and security frameworks such as NIST SSDF, IEC 62443, ISO/SAE 21434, ISO/IEC 27001, or ETSI EN 303 645, covering...
- Experience handling coordinated vulnerability disclosures, CVEs, embargoed responses, software-supply-chain security, open-source...
- Experience in C, C++, Python, or related programming languages for embedded systems and security analysis, and a background in...
- Ability to balance security principles with platform performance, power, and lifecycle requirements, and identify urgent findings and...
Original job description
Content provided by the employer
Original job description
Content provided by the employer
NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world.
Join NVIDIA, where innovation opens doors! We need a Senior Product Security Lead to direct product-security strategy and delivery for NVIDIA Jetson, Linux for Tegra (L4T), and the JetPack software platform. Jetson drives next-generation robotics, autonomous machines, and edge-AI products. This role plays an important part in making sure these products stay secure, maintainable, and production-ready throughout their lifecycles. You will lead full product security for Jetson, covering architecture, development, release, vulnerability response, and customer productization. The position brings together security efforts across NVIDIA's silicon, firmware, OS, platform, and application teams and partners with key customers to set security responsibilities and guarantee production readiness.
What you'll be doing:
Oversee and guide the entire product security strategy and roadmap for Jetson, L4T, and JetPack—from initial architecture and development through rollout and post-launch support—while establishing well-defined product-level security mandates, structural principles, release benchmarks, and lifecycle methodologies.
Embed secure-by-design principles across firmware, boot software, the Linux kernel, device drivers, system software, containers, and platform services by providing hands-on security engineering mentorship and partnering with silicon, firmware, manufacturing, and platform-security teams on core capabilities (e.g., secure boot, hardware roots of trust, key provisioning, device identity, debug security, trusted execution, rollback protection, and secure update).
Lead threat analysis and vulnerability assessments—including TAVA, threat modeling, risk analysis, attack-surface analysis, and security architecture reviews—while coordinating the triage and resolution of security findings with NVIDIA PSIRT and engineering teams to assess impact, prioritize risk, and drive mitigations to closure.
Support NVIDIA and customer readiness for cybersecurity regulations, such as the EU CRA, by identifying technical gaps and coordinating evidence. Clarify shared responsibilities and work closely with legal, compliance, and cybersecurity teams on regulatory interpretation.
Coordinate the creation and upkeep of product-security materials, including SBOMs, security white papers, secure-deployment mentorship, vulnerability-management documentation, and customer-facing security collateral.
Serve as the primary product-security contact for Jetson engineering teams, program management, NVIDIA PSIRT, internal application teams, and selected strategic customers and partners.
Develop scalable processes, reusable mentorship, and foundational security standards to align multiple development teams.
Define and track operational metrics covering vulnerability response, security-requirement coverage, remediation progress, security collateral generation, and overall product-release readiness.
What we need to see:
Bachelor’s or Master’s degree, or equivalent experience, in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a related field. Applicants must have 12+ years in security engineering. At least 3 years should be in product-security, platform-security, security-architecture, or technical leadership.
Experience securing complex embedded, Linux, robotics, edge-computing, automotive, or system-on-chip platforms, with a strong understanding of low-level systems software such as firmware, bootloaders, kernels, device drivers, system services, and containers.
Solid platform-security fundamentals, including secure boot, roots of trust, trusted execution, key management, cryptography, secure provisioning, debug protection, and secure software update.
Practical experience with threat modeling, security architecture reviews, vulnerability assessments, risk analysis, and security-requirement development.
Experience integrating security practices into the software development lifecycle, encompassing code analysis, dependency management, vulnerability scanning, SBOM generation, and remediation workflows.
Lead and influence across organizations without direct authority. Growing in a global engineering environment with competing product and release priorities.
Excellent written and verbal communication skills, with the ability to explain complex security risks across engineers, executives, customers, and non-security partners.
Ways to stand out from the crowd:
Hands-on experience with NVIDIA Jetson, Tegra, L4T, JetPack, or similar ARM-based embedded platforms within robotics, industrial systems, autonomous machines, automotive, or edge AI.
Worked with CRA and security frameworks like NIST SSDF, IEC 62443, ISO/SAE 21434, ISO/IEC 27001, or ETSI EN 303 645. These covered lifecycle documentation, vulnerability handling, and regulatory evidence.
Experience handling coordinated vulnerability disclosures, CVEs, embargoed responses, software-supply-chain security, open-source dependencies, container security, signing, attestation, and build provenance.
Experience in C, C++, Python, or related programming languages for embedded systems and security analysis, accompanied by a background in developing customer-facing security white papers, guides, and threat assessments.
Demonstrated ability to balance strong security principles alongside platform performance, power, and lifecycle requirements. You identify urgent findings and systemic risks to promote durable improvements across organizational boundaries and customer production deployments.
You will also be eligible for equity and benefits.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.About the company
NVIDIA
Large Enterprise
NVIDIA is a leading technology company renowned for its graphics processing units (GPUs) and innovative computing solutions that enhance visual experiences across multiple platforms, including gaming, scientific research, and artificial intelligence. Founded in 1993, the company has expanded its offerings to include powerful AI frameworks and deep learning platforms, making significant contributions to industries such as gaming, data centers, automotive, and healthcare. NVIDIA's commitment to pushing the boundaries of visual computing continues to drive advancements in both hardware and software, positioning the company at the forefront of emerging technologies and digital transformation.