Goal templates — Security Engineering — P7

Security · Security Engineering · P7 — Staff / Distinguished Professional

These are canon-derived frames, not advice: every line is either verbatim JobFrame canon text or a fixed template wrapping it. ⟨target⟩ / ⟨baseline⟩ / ⟨date⟩ are placeholders for the manager to fill in. Nothing here is generated by AI — rows are omitted, never invented, when the canon lacks the underlying field.

SMART goals

One row per canon core output / responsibility this level owns.

JFM responsibility (P7)

Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope

Specific: Deliver: "Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
Relevant: Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
Time-bound: ⟨date⟩

JFM responsibility (P7)

Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks

Specific: Deliver: "Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
Relevant: Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
Time-bound: ⟨date⟩

JFM responsibility (P7)

Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies

Specific: Deliver: "Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
Relevant: Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
Time-bound: ⟨date⟩

JFM responsibility (P7)

Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility

Specific: Deliver: "Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
Relevant: Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
Time-bound: ⟨date⟩

JFM responsibility (P7)

Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports

Specific: Deliver: "Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
Relevant: Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
Time-bound: ⟨date⟩

Copy / print as textshow ▾

1. Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope  [source: JFM responsibility (P7)]
   Specific:    Deliver: "Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
   Relevant:    Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
   Time-bound:  ⟨date⟩

2. Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks  [source: JFM responsibility (P7)]
   Specific:    Deliver: "Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
   Relevant:    Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
   Time-bound:  ⟨date⟩

3. Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies  [source: JFM responsibility (P7)]
   Specific:    Deliver: "Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
   Relevant:    Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
   Time-bound:  ⟨date⟩

4. Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility  [source: JFM responsibility (P7)]
   Specific:    Deliver: "Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
   Relevant:    Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
   Time-bound:  ⟨date⟩

5. Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports  [source: JFM responsibility (P7)]
   Specific:    Deliver: "Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves ambiguous, precedent-free security problems with broad business consequences; defines multi-year technical roadmaps."
   Relevant:    Advances the Security · Security Engineering mandate for a P7 — Staff / Distinguished Professional.
   Time-bound:  ⟨date⟩

OKRs

Objectives from this level's core outputs; key results only where a real dimension or capability backs them.

JFM responsibility (P7)

Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope"
Evidence at this level's scope bar: "Cross-organization / enterprise technical strategy" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P7)

Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks"
Evidence at this level's autonomy bar: "Operates autonomously at the enterprise level" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P7)

Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies"
Evidence at this level's complexity bar: "Industry-level, highly ambiguous problems" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P7)

Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility"
Evidence at this level's impact bar: "Enterprise-wide" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P7)

Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports"
Evidence at this level's decision rights bar: "Final technical authority across multiple domains" — ⟨target⟩ by ⟨date⟩

Copy / print as textshow ▾

Objective 1: Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope  [source: JFM responsibility (P7)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope"
  KR2. Evidence at this level's scope bar: "Cross-organization / enterprise technical strategy" — ⟨target⟩ by ⟨date⟩

Objective 2: Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks  [source: JFM responsibility (P7)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks"
  KR2. Evidence at this level's autonomy bar: "Operates autonomously at the enterprise level" — ⟨target⟩ by ⟨date⟩

Objective 3: Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies  [source: JFM responsibility (P7)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies"
  KR2. Evidence at this level's complexity bar: "Industry-level, highly ambiguous problems" — ⟨target⟩ by ⟨date⟩

Objective 4: Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility  [source: JFM responsibility (P7)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility"
  KR2. Evidence at this level's impact bar: "Enterprise-wide" — ⟨target⟩ by ⟨date⟩

Objective 5: Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports  [source: JFM responsibility (P7)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports"
  KR2. Evidence at this level's decision rights bar: "Final technical authority across multiple domains" — ⟨target⟩ by ⟨date⟩

MBO areas

Key result areas from this level's responsibilities, each with a standard grounded in the canon leveling rubric where one exists.

Area	Standard	Target	Due
Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope	Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."	⟨target⟩	⟨date⟩
Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks	Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."	⟨target⟩	⟨date⟩
Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies	Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."	⟨target⟩	⟨date⟩
Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility	Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."	⟨target⟩	⟨date⟩
Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports	Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."	⟨target⟩	⟨date⟩

Copy / print as textshow ▾

1. Area: Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope  [source: JFM responsibility (P7) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."
   Target:   ⟨target⟩   Due: ⟨date⟩

2. Area: Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks  [source: JFM responsibility (P7) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."
   Target:   ⟨target⟩   Due: ⟨date⟩

3. Area: Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies  [source: JFM responsibility (P7) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."
   Target:   ⟨target⟩   Due: ⟨date⟩

4. Area: Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility  [source: JFM responsibility (P7) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."
   Target:   ⟨target⟩   Due: ⟨date⟩

5. Area: Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports  [source: JFM responsibility (P7) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies field-shaping expertise to set technical direction for the security engineering function and develop novel detection and defense approaches."
   Target:   ⟨target⟩   Due: ⟨date⟩

Scorecard

Only perspectives with real canon backing are shown — no Financial or Customer perspective, since nothing in the canon grounds business-financial or customer measures for a role alone.

Internal process

"Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope"→ ⟨target⟩ by ⟨date⟩
"Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks"→ ⟨target⟩ by ⟨date⟩
"Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies"→ ⟨target⟩ by ⟨date⟩
"Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility"→ ⟨target⟩ by ⟨date⟩
"Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports"→ ⟨target⟩ by ⟨date⟩

Role calibration

Meets the scope bar: "Cross-organization / enterprise technical strategy"→ ⟨target⟩ by ⟨date⟩
Meets the autonomy bar: "Operates autonomously at the enterprise level"→ ⟨target⟩ by ⟨date⟩
Meets the complexity bar: "Industry-level, highly ambiguous problems"→ ⟨target⟩ by ⟨date⟩
Meets the impact bar: "Enterprise-wide"→ ⟨target⟩ by ⟨date⟩
Meets the decision rights bar: "Final technical authority across multiple domains"→ ⟨target⟩ by ⟨date⟩
Meets the leadership bar: "Sets technical direction org-wide; develops principals"→ ⟨target⟩ by ⟨date⟩

Copy / print as textshow ▾

Internal process
  - "Sets direction for the security engineering function across the organization, anticipating emerging threats and defining multi-year technical roadmaps with organizational and external scope"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P7)]
  - "Solves precedent-free, ambiguous security problems with broad business consequences, developing new detection models, cloud-native defense approaches, or architectural frameworks"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P7)]
  - "Significantly influences company security strategy as a trusted advisor to department leadership, driving complex initiatives across departments with multiple cross-org dependencies"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P7)]
  - "Serves as an ambassador for security inside and outside the organization, advancing detection-as-code and threat-hunting practice through external technical visibility"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P7)]
  - "Provides high-level mentorship to principal and senior engineers, shaping organizational security capability and influencing peer professionals without requiring direct reports"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P7)]

Role calibration
  - Meets the scope bar: "Cross-organization / enterprise technical strategy"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Scope)]
  - Meets the autonomy bar: "Operates autonomously at the enterprise level"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Autonomy)]
  - Meets the complexity bar: "Industry-level, highly ambiguous problems"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Complexity)]
  - Meets the impact bar: "Enterprise-wide"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Impact)]
  - Meets the decision rights bar: "Final technical authority across multiple domains"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Decision rights)]
  - Meets the leadership bar: "Sets technical direction org-wide; develops principals"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Leadership)]