GPU SW Security PSIRT Lead

at Nvidia

📍 Santa Clara, United States

USD 224,000-356,500 per year

SENIOR

✅ On-site

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Communication @ 4 Debugging @ 4 GPU LLM Security @ 4 System Architecture @ 3

Details

NVIDIA is seeking a highly motivated security engineer to join the GPU Software team and anchor PSIRT and security responses for its largest and most diverse software organization.

Responsibilities

Program leadership: Own GPU Software PSIRT as the central point of contact for engineering teams. Communicate risks, advocate for PSIRT priorities, and report metrics to security leadership.
Triage and prioritization: Assess report validity and severity, including collaboration with Hardware Security. Draft CVSS, CVE, and CWE details. Prioritize cases based on technical severity, media attention, and business impact, and challenge unsupported claims.
Technical investigation: Reproduce vulnerabilities, determine root causes, recommend fixes, and lead urgent zero-day responses.
Remediation coordination: Identify owners from sparse crash logs, track bugs, communicate status, and ensure SLAs.
Tooling and enablement: Develop risk dashboards and automate triage, routing, and scoring with LLMs. Train engineers on PSIRT processes and vulnerability response.

Requirements

Bachelor's or master's degree in Computer Engineering, Computer Science, or a related field.
12 or more years of vulnerability management or PSIRT experience in complex organizations.
Ability to clearly articulate security issues and practical consequences to engineering and management audiences at diverse levels.
Strong C programming skills with hands-on experience in embedded systems or device drivers.
Proven ability to debug crashes, reproduce vulnerabilities, and identify root causes.
Familiarity with system architecture fundamentals, including caches, buses, memory controllers, and DMA.

Preferred Qualifications

Experience serving as a PSIRT lead in a large organization with complex communication requirements.
Offensive security and debugging experience in kernels, drivers, or firmware.
Demonstrated ability to deploy agentic workflows.
Experience with toolchains such as GCC and GDB.
Experience with embedded-system software concepts, including RTOS and overlay programming models.

Benefits

NVIDIA offers competitive salaries, equity, and a comprehensive benefits package. NVIDIA is an equal opportunity employer committed to fostering an inclusive work environment.

Applications will be accepted at least until October 2, 2026.