Sr Lead Security Engineer

Job description

As a Product Owner, Hardware Security at JPMorganChase within Cybersecurity and Technology Controls, you will own the product strategy, roadmap, and backlog for the firm’s hardware security control plane. You will sit at the intersection of infrastructure partners, architecture, and engineering to sequence how the firm governs trust in hardware and firmware across the device lifecycle. You will turn control outcomes into a deliverable backlog, represent internal customers (network, servers, employee compute, data center, integrators), and hold definition of done so the platform reduces hardware risk rather than accumulating tools. Job responsibilities

• Define and execute the product vision and multi-quarter roadmap for hardware security, aligned to firm cybersecurity, technology-control, and regulatory obligations
• Own and prioritize the product backlog; write user stories and acceptance criteria; accept or reject increments against agreed definition of done
• Drive roadmap trade-offs across intake, operate, and decommission use cases, balancing risk reduction, operational feasibility, and partner adoption
• Partner with the Hardware Security Lead, architecture, and engineering to translate the trust model into sequenced delivery - without owning architecture or production operations
• Own work intake from infrastructure and security partners; assess, sequence, or decline requests against the roadmap
• Establish success metrics (adoption, time-to-decision, control evidence, operational use) and report product performance to stakeholders
• Support the investment case for subsequent increments: outcome, scope, explicit cuts
• Treat vendor capabilities as signal sources into the control plane rather than as standalone consoles
• Lead planning with engineering and architecture each cycle; keep work in the team’s system of record
• Engage and influence stakeholders across Cybersecurity, Infrastructure, Risk, and Control functions

Required qualifications, capabilities, and skills

• 10+ years of product ownership or product management experience delivering platforms consumed by other engineering or infrastructure teams
• 5+ years in cybersecurity, technology controls, infrastructure security, or an adjacent control domain
• Proven experience taking a control or platform product from limited production to adopted operational use
• Strong understanding of the product development lifecycle (discovery, requirements, roadmap, delivery, value measurement)
• Working knowledge of enterprise infrastructure (servers, network, data centers) and why firmware and hardware integrity sit below conventional security tooling
• Experience operating in a regulated environment, including data handling, vendor constraints, audit, and change control
• Demonstrated ability to influence senior stakeholders and decline work that does not serve the product
• Experience working with Scrum/Agile teams and standard delivery tools
• Excellent written and verbal communication, including executive-ready product narratives
• Bachelor’s degree or equivalent experience

Preferred qualifications, capabilities, and skills

• Direct experience in hardware supply-chain security, firmware assurance, cyber supply-chain risk management, or device trust
• Experience integrating third-party security tools into an internal control plane
• Prior role in financial services or similarly regulated critical infrastructure
• Familiarity with large-firm governance paths (architecture review, productionization, control evidence)
• People leadership of product owners or business analysts (not required if the candidate has owned a comparable platform solo)

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans