Security Software Engineer, Vulnerability Operations

at Nvidia

📍 United States

USD 124,000-241,500 per year

JUNIOR

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

AI API @ 3 ArgoCD @ 3 Celery @ 3 Claude Code @ 3 Codex @ 3 Docker @ 3 FastAPI Git @ 3 GitHub Kubernetes @ 3 LLM @ 3 Linux @ 3 OpenShift PostgreSQL Python @ 5 React @ 3 Redis @ 3 SQL @ 3 Security @ 3 TypeScript @ 3 Vault

Details

NVIDIA's Vulnerability Operations organization is seeking a Security Software Engineer to help operate and improve its AI-powered vulnerability operations platform. The platform uses LLM agents to scan tens of thousands of repositories and live web applications across NVIDIA, then unifies, verifies, and routes findings to the engineers who can fix them. This role offers ownership of production responsibilities, including maintaining the scanning fleet, improving the triage experience, and ensuring data quality.

Responsibilities

Support day-to-day operations of the vulnerability management hub and its two AI scanning engines.
Monitor scan fleets and worker queues, investigate stuck or failed scans, and ship fixes.
Build and maintain features across the stack using Python, FastAPI, React, TypeScript, and PostgreSQL.
Triage feedback from security engineers and repository owners by reproducing bugs, running SQL data reconciliations, and closing the loop with users.
Operate the GitOps deployment pipeline using Kubernetes/OpenShift, ArgoCD, and Vault.
Ship releases to staging and production, rotate secrets, and validate rollouts.
Improve scan coverage and data quality through asset inventory across GitLab, GitHub, Gerrit, and Perforce; ownership attribution; finding lifecycle management; and deduplication logic.
Work with senior engineers on the LLM agent harnesses used for scanning and verification.

Requirements

Bachelor's degree in computer science, engineering, or equivalent experience.
1–3 years of software engineering experience, including internships, with solid Python fundamentals.
Working knowledge of SQL and relational databases.
Comfort working in Linux and Git environments, with a willingness to debug across unfamiliar systems.
Interest in security and motivation to develop security expertise.
Strong ownership instincts, including following problems to root cause and communicating clearly.

Preferred Qualifications

Frontend experience with React and TypeScript.
Exposure to Docker, Kubernetes, ArgoCD, GitOps, or job-queue and worker architectures such as Redis, Celery, or ARQ.
Hands-on experience with LLM APIs, agent frameworks, or coding agents such as Claude Code, Codex, or opencode.
Security fundamentals demonstrated through CTF participation, security coursework, bug bounty writeups, or certifications such as Security+ or eJPT.
Contributions to open-source projects or a portfolio of shipped side projects.

Compensation and Benefits

Base salary for Level 2: USD 124,000–195,500 per year.
Base salary for Level 3: USD 152,000–241,500 per year.
Eligibility for equity and benefits.
Applications will be accepted at least until September 6, 2026.
NVIDIA is an equal opportunity employer committed to an inclusive work environment.