1 day ago
Base Salary
$152k - $288k/yr
Responsibilities
- Investigate and reproduce vulnerabilities, assess exploitability and impact, and identify affected products and software versions.
- Assess third-party vulnerabilities and coordinate dependency updates, mitigations, or documented exceptions.
- Drive vulnerability remediation with engineering owners and PSIRT Operations through risk prioritization, escalation, and coordinated disclosure.
- Develop or review security fixes, validate mitigations, create regression tests, and coordinate updates across supported releases.
- Build automation for vulnerability triage, analysis, and tracking.
- Improve and promote secure development lifecycle practices through threat modeling, security design reviews, and security best practices.
- Drive SDL adoption across distributed NVIDIA data center software teams.
Requirements
- BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience.
- At least 5 years of relevant software or security engineering experience.
- Hands-on experience investigating and remediating vulnerabilities, including familiarity with CVSS scoring and CWE classification.
- Experience with secure development practices and security testing tools such as static analysis, fuzzing, and software composition analysis.
- Familiarity with server firmware and systems software, plus experience building automation with Python or a comparable language.
- Experience with modern AI and agents and a proactive approach to adopting new tools and techniques.
- Ability to drive resolution across distributed and diverse engineering teams.
- Strong technical foundation in embedded systems, firmware architecture, memory safety, and hardware-software interfaces.
- Strong written and verbal communication skills and comfort working through ambiguity and complexity.
- Preferred experience includes product security for modern data center systems, secure boot, root of trust, attestation, UEFI, SPDM, TCG DICE, SDL adoption, security automation, vulnerability research, security fixes, or open-source security contributions.
Benefits
- Eligible for equity and benefits.
- Base salary depends on location, experience, and comparable employee pay; the posting lists Level 3 and Level 4 salary ranges.
- Applications are accepted at least until October 30, 2026.
- This posting is for an existing vacancy.
About Nvidia
Nvidia designs and sells GPUs and accelerated computing platforms for data centers, AI/ML, graphics, gaming, and automotive, monetizing through hardware, software platforms (CUDA, AI frameworks), and systems like DGX and networking. Customers include cloud providers, enterprises, researchers, and OEMs. Founded in 1993 and headquartered in Santa Clara, it is a public company traded on NASDAQ under NVDA.