4 days ago
Base Salary
$152k - $288k/yr
Responsibilities
- Find vulnerabilities and write exploits against data center systems firmware, including management controllers, roots of trust, BIOS, GPUs, SmartNICs, and NVLink switches.
- Use platform threat models covering attacks on management planes, confidential workloads, and the software supply chain.
- Influence engineering teams to mitigate vulnerability classes and improve defense in depth.
- Automate bug discovery, severity assessment, and mapping of vulnerabilities to platform-level threats.
- Collaborate and communicate with engineering teams and leadership, including remote teams.
Requirements
- Bachelor’s or master’s degree in computer engineering, computer science, or a related field, or equivalent experience.
- 5+ years of experience in security engineering or vulnerability research, including 4+ years of software engineering.
- Exceptional C and Python skills and fluency reading ARM or RISC-V assembly.
- Experience auditing embedded firmware, Linux applications, and network-facing services.
- Experience with AFL++, libFuzzer, or syzkaller and with static analysis.
- Knowledge of modern server architecture and secure boot.
- Strong written and verbal communication and effective collaboration skills.
Benefits
- Eligible for equity and benefits.
- Applications will be accepted at least until November 16, 2026.
About Nvidia
Nvidia designs and sells GPUs and accelerated computing platforms for data centers, AI/ML, graphics, gaming, and automotive, monetizing through hardware, software platforms (CUDA, AI frameworks), and systems like DGX and networking. Customers include cloud providers, enterprises, researchers, and OEMs. Founded in 1993 and headquartered in Santa Clara, it is a public company traded on NASDAQ under NVDA.