3 days ago
Base Salary
$224k - $357k/yr
Responsibilities
- Review application designs and code, develop threat models, and help engineering teams remediate security risks before deployment.
- Design and implement authentication, authorization, service identity, tenant isolation, and resource-level access controls for APIs, services, and applications.
- Build reusable security libraries, tooling, and reference implementations.
- Improve credential, secrets, sensitive-data, and security-relevant logging practices.
- Integrate practical security checks into development and CI/CD workflows.
- Investigate application vulnerabilities, develop fixes with service owners, and add regression coverage.
- Partner with infrastructure and corporate security teams to prioritize improvements and measure effectiveness.
Requirements
- 12+ years of relevant experience and a BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience.
- Experience building and operating production software with substantial application or product security experience.
- Strong programming skills in Go, Python, Java, C++, or a comparable language, including the ability to review and modify unfamiliar code.
- Practical knowledge of web and API security, authentication, authorization, and common vulnerability classes.
- Experience with threat modeling and security reviews for distributed systems.
- Ability to translate security findings into engineering changes and prioritize work based on risk and impact.
- Clear communication and collaborative experience with engineering teams.
- Preferred experience with OAuth 2.0, OpenID Connect, service identity, authorization policy systems, multi-tenant services, data platforms, developer infrastructure, Kubernetes, cloud IAM, infrastructure as code, CI/CD systems, vulnerability detection, or dependency security.
Benefits
- Eligible for equity and benefits.
- Applications will be accepted at least until October 9, 2026.
About Nvidia
Nvidia designs and sells GPUs and accelerated computing platforms for data centers, AI/ML, graphics, gaming, and automotive, monetizing through hardware, software platforms (CUDA, AI frameworks), and systems like DGX and networking. Customers include cloud providers, enterprises, researchers, and OEMs. Founded in 1993 and headquartered in Santa Clara, it is a public company traded on NASDAQ under NVDA.