Sr Lead Security Engineer

JPMorganChase•Jersey City, NJ

About The Position

As a Product Owner, Hardware Security at JPMorganChase within Cybersecurity and Technology Controls, you will own the product strategy, roadmap, and backlog for the firm’s hardware security control plane. You will work at the intersection of infrastructure partners, architecture, and engineering to sequence how the firm governs trust in hardware and firmware across the device lifecycle. You will turn control outcomes into a deliverable backlog, represent internal customers across network, servers, employee compute, data center, and integrators, and maintain a definition of done focused on reducing hardware risk rather than accumulating tools.

Requirements

10+ years of product ownership or product management experience delivering platforms consumed by other engineering or infrastructure teams.
5+ years in cybersecurity, technology controls, infrastructure security, or an adjacent control domain.
Proven experience taking a control or platform product from limited production to adopted operational use.
Strong understanding of the product development lifecycle, including discovery, requirements, roadmap, delivery, and value measurement.
Working knowledge of enterprise infrastructure, including servers, networks, and data centers, and why firmware and hardware integrity sit below conventional security tooling.
Experience operating in a regulated environment, including data handling, vendor constraints, audit, and change control.
Demonstrated ability to influence senior stakeholders and decline work that does not serve the product.
Experience working with Scrum/Agile teams and standard delivery tools.
Excellent written and verbal communication, including executive-ready product narratives.
Bachelor’s degree or equivalent experience.

Nice To Haves

Direct experience in hardware supply-chain security, firmware assurance, cyber supply-chain risk management, or device trust.
Experience integrating third-party security tools into an internal control plane.
Prior role in financial services or similarly regulated critical infrastructure.
Familiarity with large-firm governance paths, including architecture review, productionization, and control evidence.
People leadership of product owners or business analysts; this is not required if the candidate has owned a comparable platform solo.

Responsibilities

Define and execute the product vision and multi-quarter roadmap for hardware security, aligned to firm cybersecurity, technology-control, and regulatory obligations.
Own and prioritize the product backlog; write user stories and acceptance criteria; and accept or reject increments against the agreed definition of done.
Drive roadmap trade-offs across intake, operate, and decommission use cases, balancing risk reduction, operational feasibility, and partner adoption.
Partner with the Hardware Security Lead, architecture, and engineering to translate the trust model into sequenced delivery, without owning architecture or production operations.
Own work intake from infrastructure and security partners; assess, sequence, or decline requests against the roadmap.
Establish success metrics, including adoption, time-to-decision, control evidence, and operational use, and report product performance to stakeholders.
Support the investment case for subsequent increments by defining outcomes, scope, and explicit cuts.
Treat vendor capabilities as signal sources into the control plane rather than as standalone consoles.
Lead planning with engineering and architecture each cycle and keep work in the team’s system of record.
Engage and influence stakeholders across Cybersecurity, Infrastructure, Risk, and Control functions.