Senior Product Security Lead – NVIDIA Jetson

• Oversee and guide the entire product security strategy and roadmap for Jetson, L4T, and JetPack—from initial architecture and development through rollout and post-launch support—while establishing well-defined product-level security mandates, structural principles, release benchmarks, and lifecycle methodologies.
• Embed secure-by-design principles across firmware, boot software, the Linux kernel, device drivers, system software, containers, and platform services by providing hands-on security engineering mentorship and partnering with silicon, firmware, manufacturing, and platform-security teams on core capabilities (e.g., secure boot, hardware roots of trust, key provisioning, device identity, debug security, trusted execution, rollback protection, and secure update).
• Lead threat analysis and vulnerability assessments—including TAVA, threat modeling, risk analysis, attack-surface analysis, and security architecture reviews—while coordinating the triage and resolution of security findings with NVIDIA PSIRT and engineering teams to assess impact, prioritize risk, and drive mitigations to closure.
• Support NVIDIA and customer readiness for cybersecurity regulations, such as the EU CRA, by identifying technical gaps and coordinating evidence. Clarify shared responsibilities and work closely with legal, compliance, and cybersecurity teams on regulatory interpretation.
• Coordinate the creation and upkeep of product-security materials, including SBOMs, security white papers, secure-deployment mentorship, vulnerability-management documentation, and customer-facing security collateral.
• Serve as the primary product-security contact for Jetson engineering teams, program management, NVIDIA PSIRT, internal application teams, and selected strategic customers and partners.
• Develop scalable processes, reusable mentorship, and foundational security standards to align multiple development teams.
• Define and track operational metrics covering vulnerability response, security-requirement coverage, remediation progress, security collateral generation, and overall product-release readiness.

• Bachelor’s or Master’s degree, or equivalent experience, in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a related field. Applicants must have 12+ years in security engineering. At least 3 years should be in product-security, platform-security, security-architecture, or technical leadership.
• Experience securing complex embedded, Linux, robotics, edge-computing, automotive, or system-on-chip platforms, with a strong understanding of low-level systems software such as firmware, bootloaders, kernels, device drivers, system services, and containers.
• Solid platform-security fundamentals, including secure boot, roots of trust, trusted execution, key management, cryptography, secure provisioning, debug protection, and secure software update.
• Practical experience with threat modeling, security architecture reviews, vulnerability assessments, risk analysis, and security-requirement development.
• Experience integrating security practices into the software development lifecycle, encompassing code analysis, dependency management, vulnerability scanning, SBOM generation, and remediation workflows.
• Lead and influence across organizations without direct authority. Growing in a global engineering environment with competing product and release priorities.
• Excellent written and verbal communication skills, with the ability to explain complex security risks across engineers, executives, customers, and non-security partners.

Ways to stand out from the crowd

• Hands-on experience with NVIDIA Jetson, Tegra, L4T, JetPack, or similar ARM-based embedded platforms within robotics, industrial systems, autonomous machines, automotive, or edge AI.
• Worked with CRA and security frameworks like NIST SSDF, IEC 62443, ISO/SAE 21434, ISO/IEC 27001, or ETSI EN 303 645. These covered lifecycle documentation, vulnerability handling, and regulatory evidence.
• Experience handling coordinated vulnerability disclosures, CVEs, embargoed responses, software-supply-chain security, open-source dependencies, container security, signing, attestation, and build provenance.
• Experience in C, C++, Python, or related programming languages for embedded systems and security analysis, accompanied by a background in developing customer-facing security white papers, guides, and threat assessments.
• Demonstrated ability to balance strong security principles alongside platform performance, power, and lifecycle requirements. You identify urgent findings and systemic risks to promote durable improvements across organizational boundaries and customer production deployments.

Your base salary will be determined based on your location, experience, and other objective job-related factors. The expected base salary range for this position is 224,000 USD – 356,500 USD.

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until November 3, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.