Description
NVIDIA is seeking a Senior Product Security Lead to direct product-security strategy and delivery for NVIDIA Jetson, Linux for Tegra (L4T), and the JetPack software platform.
The successful candidate will lead full product security for Jetson, covering architecture, development, release, vulnerability response, and customer productization.
Responsibilities:
- Oversee and guide the entire product security strategy and roadmap for Jetson, L4T, and JetPack
- Embed secure-by-design principles across firmware, boot software, the Linux kernel, device drivers, system software, containers, and platform services
- Lead threat analysis and vulnerability assessments, and coordinate the triage and resolution of security findings
- Support NVIDIA and customer readiness for cybersecurity regulations
- Coordinate the creation and upkeep of product-security materials
- Serve as the primary product-security contact for Jetson engineering teams and selected strategic customers and partners
- Develop scalable processes, reusable mentorship, and foundational security standards
- Define and track operational metrics covering vulnerability response, security-requirement coverage, and overall product-release readiness
Requirements:
- Bachelor’s or Master’s degree, or equivalent experience, in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a related field
- 12+ years in security engineering, with at least 3 years in product-security, platform-security, security-architecture, or technical leadership
- Experience securing complex embedded, Linux, robotics, edge-computing, automotive, or system-on-chip platforms
- Solid platform-security fundamentals, including secure boot, roots of trust, trusted execution, key management, cryptography, secure provisioning, debug protection, and secure software update
- Practical experience with threat modeling, security architecture reviews, vulnerability assessments, risk analysis, and security-requirement development
- Excellent written and verbal communication skills
Nice to Have:
- Hands-on experience with NVIDIA Jetson, Tegra, L4T, JetPack, or similar ARM-based embedded platforms
- Worked with CRA and security frameworks like NIST SSDF, IEC 62443, ISO/SAE 21434, ISO/IEC 27001, or ETSI EN 303 645
- Experience handling coordinated vulnerability disclosures, CVEs, embargoed responses, software-supply-chain security, open-source dependencies, container security, signing, attestation, and build provenance
- Experience in C, C++, Python, or related programming languages for embedded systems and security analysis
- Demonstrated ability to balance strong security principles alongside platform performance, power, and lifecycle requirements