Senior Product Security Lead – NVIDIA Jetson

Job Title

Senior Product Security Lead – NVIDIA Jetson

Role Summary

Lead product-security strategy and delivery for NVIDIA Jetson, Linux for Tegra (L4T), and the JetPack software platform. Own product-level security architecture, release readiness, vulnerability response, and customer security requirements across silicon, firmware, OS, and platform teams.

This role combines hands-on security engineering, cross-team coordination, and engagement with customers and PSIRT to ensure Jetson products are secure and production-ready throughout their lifecycles.

Experience Level

Senior - applicants should have 12+ years of security engineering experience, including at least 3 years in product-security, platform-security, security architecture, or technical leadership.

Responsibilities

Primary responsibilities include defining product security strategy, driving mitigations, and enabling secure product releases.

• Define and oversee product-security strategy and roadmap for Jetson, L4T, and JetPack from architecture through post-launch support.
• Embed secure-by-design practices across firmware, boot software, kernel, drivers, system services, containers, and platform services.
• Provide hands-on security engineering mentorship and coordinate with silicon, firmware, manufacturing, and platform-security teams on capabilities such as secure boot, hardware roots of trust, key provisioning, device identity, debug security, trusted execution, rollback protection, and secure update.
• Lead threat analysis and vulnerability assessments (TAVA, threat modeling, attack-surface analysis, security architecture reviews) and coordinate triage and remediation with PSIRT and engineering teams.
• Support regulatory and compliance readiness (e.g., EU CRA) by identifying technical gaps and coordinating evidence with legal and compliance teams.
• Create and maintain product-security materials: SBOMs, security white papers, vulnerability-management docs, and customer-facing security collateral.
• Act as the primary product-security contact for engineering, program management, PSIRT, application teams, and strategic customers.
• Develop scalable processes, reusable mentorship, and foundational security standards; define and track metrics for vulnerability response and release readiness.

Requirements

Must-have technical skills, experience, and behaviors required to succeed in this role.

• 12+ years of security engineering experience with demonstrated technical leadership and cross-organizational influence.
• Experience securing complex embedded, Linux, robotics, edge-computing, automotive, or SoC platforms and familiarity with low-level systems software (firmware, bootloaders, kernels, device drivers, system services, containers).
• Strong platform-security fundamentals: secure boot, roots of trust, trusted execution, key management, cryptography, secure provisioning, debug protection, and secure software update.
• Practical experience with threat modeling, security architecture reviews, vulnerability assessments, risk analysis, and creating security requirements.
• Experience integrating security into the software development lifecycle: code analysis, dependency management, vulnerability scanning, SBOM generation, and remediation workflows.
• Proven ability to lead and influence without direct authority and to communicate complex security risks to engineers, executives, customers, and non-security stakeholders.
• Excellent written and verbal communication skills and experience producing customer-facing security documentation.

Nice-to-have:

• Hands-on experience with NVIDIA Jetson, Tegra, L4T, JetPack, or ARM-based embedded platforms.
• Familiarity with CRA and security frameworks such as NIST SSDF, IEC 62443, ISO/SAE 21434, ISO/IEC 27001, or ETSI EN 303 645.
• Experience with coordinated vulnerability disclosure, software supply chain security, container security, signing/attestation, and build provenance.
• Experience programming or scripting in C, C++, Python for embedded systems and security analysis.

Education Requirements

Bachelor's or Master’s degree in Computer Science, Computer/Electrical Engineering, Cybersecurity, or a related field, or equivalent practical experience.

About the Company

Company: NVIDIA

Headquarters: Santa Clara, California, USA

NVIDIA is a global leader in accelerated computing, renowned for its innovative solutions in AI and digital twins that transform diverse industries. The company specializes in networking technologies, providing end-to-end InfiniBand and Ethernet solutions for servers and storage that optimize performance and scalability. NVIDIA serves sectors such as high-performance computing, enterprise data centers, and cloud computing, constantly reinventing its products and services to stay ahead in the market.