Front-End Full-Stack Security Engineer

Details

The NVIDIA Product Security Team is seeking a hands-on Security Engineer to join the Secure Development Platform team and help build the next generation of user interfaces, workflows, backend services and dashboards that manage NVIDIA software releases. This role will promote a "secure-by-default" culture and partner with engineering teams to integrate security insights and automation into every stage of the SDLC. You will help build NVIDIA's SDLC Security Agent and OSS Security platform to detect insecure coding patterns, track OSS consumption, and drive early remediation workflows across the development ecosystem.

Responsibilities

• Design and develop front-end applications and interactive workflows (dashboards, checklists, attestations) that present security and compliance data in intuitive, actionable ways for developers and Security Owners.
• Work with Figma and stakeholders to design, prototype, and validate UX flows, translating complex compliance requirements into simple, user-friendly experiences.
• Develop backend services that ingest data from version control, CI/CD pipelines, SBOM generation platforms, and container registries to surface security and compliance risks.
• Design and build agent-based security tooling to monitor and evaluate secure development practices across SDLC workflows.
• Improve alert precision and reduce noise through context-aware signal processing and risk-based prioritization; build clear, actionable checklists to assess release readiness based on context and risk profile.
• Collaborate across security, compliance, and engineering teams to optimize end-to-end user journeys, balancing usability, automation, and regulatory rigor.
• Partner with DevSecOps, Legal, and Engineering teams to align OSS governance and enforce NVIDIA's security guardrails.
• Contribute to the development of metrics, dashboards, and reports to drive adoption and track improvements in SDLC security posture.

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• 3+ years of experience in software engineering or platform security, ideally supporting developer productivity or automation tooling.
• Strong front-end engineering skills in React, Angular, or similar modern UI frameworks.
• Proficiency in Python and/or Go to build backend services and platform agents.
• Familiarity with GitHub, GitLab, or Jenkins-based CI/CD environments and secure coding practices.
• Experience building or integrating secret scanning, OSS vulnerability scanning (SCA tools), and code quality tooling.
• Understanding of container security fundamentals and cloud-native architectures (Docker, Kubernetes, AWS).
• Strong written and verbal communication skills for collaboration across engineering, security, and compliance.

Ways to Stand Out / Preferred Qualifications

• Proven success building developer-facing dashboards or self-service portals; experience conducting UX research, usability testing, or journey mapping.
• Ability to balance user experience, automation, and regulatory rigor, including presenting complex artifacts (e.g., SBOMs, compliance evidence) in clear and actionable ways.
• Familiarity with AI-assisted development tools or integrating LLMs into secure code review workflows.
• Experience managing OSS dependency policies, license risk exceptions, or policy-as-code implementations.
• Experience contributing to SDLC or security automation frameworks at scale in a high-growth environment.

Salary & Benefits

• Base salary ranges by level (determined by location, experience, and comparable pay):
  • Level 2: 120,000 USD - 189,750 USD
  • Level 3: 148,000 USD - 235,750 USD
• Eligible for equity and benefits (see NVIDIA benefits).

Other Details

• Applications accepted at least until September 28, 2025.
• NVIDIA is an equal opportunity employer and values diversity in its workforce.