Senior Firmware Security Engineer

Details

NVIDIA is seeking a security software engineer to help develop the boot software that powers its GPUs. The GPU Firmware team builds root-of-trust firmware providing secure boot, update, and attestation services across NVIDIA GPU products, from gaming systems to high-performance computing datacenters. The role focuses on securing and innovating the GPU boot process in heavily resource-constrained environments.

Responsibilities

• Design, develop, test, debug, and optimize GPU firmware throughout the entire GPU lifecycle.
• Continuously evaluate and improve the security posture of firmware and hardware forming the root of trust for NVIDIA products.
• Improve software processes and core infrastructure, including build systems, regression farms, and security test infrastructure.
• Participate in in-depth security reviews of software, hardware, processes, and infrastructure.
• Facilitate security requirements and solutions by participating in industry standards organizations and initiatives such as NIST, the Open Compute Project, and DMTF, while aligning with key customers and partners.
• Collaborate with NVIDIA and third-party hardware and software teams to improve security across hardware, BootROMs, and software stacks.
• Work within a larger virtual security team on other parts of the GPU stack as necessary.

Requirements

• BS or MS degree in electrical engineering, computer science, computer engineering, or equivalent experience.
• At least 5 years of experience developing device BIOS, firmware, or other low-level software.
• At least 2 years of experience building secure firmware and working with hardware security components.
• Strong C programming skills.
• Knowledge of secure software fundamentals, including cryptography, authentication and attestation, chains of trust, and common software security vulnerabilities.
• Ability to work closely with hardware designers and software engineers to design, develop, and debug functional and non-functional aspects of GPU subsystems.

Preferred Qualifications

• Experience with threat modeling, formal design analysis, hardware and firmware architecture, and defensive security.
• Experience with secure development techniques such as attack trees, static and dynamic analysis, fuzzing, and negative testing.
• Experience developing for safety-critical platforms.
• Experience with formal verification.

Compensation and Benefits

The base salary range is USD 152,000–241,500 per year, determined by location, experience, and the pay of employees in similar positions. The role is also eligible for equity and benefits.