Used Tools & Technologies
Not specified
Required Skills & Competences ?
Security @ 4 Software Development @ 4 Go @ 4 Python @ 4 CI/CD @ 4 Distributed Systems @ 4 Reporting @ 6 Maven @ 4 Compliance @ 6Details
NVIDIA Product Security Team is seeking a passionate and innovative Software Engineer. The team builds security platforms and integrates third-party solutions to catalog NVIDIA programs, detect vulnerabilities, drive remediation response, securely deploy into cloud environments, and innovate to meet the scale and demand of NVIDIA's product teams.
Responsibilities
- Integrate third-party scanning tools into a platform, working with external teams to ensure outputs align with the team's evidence schema and ingestion pipeline.
- Define and maintain schemas (e.g., CycloneDX) for structured evidence generation and consumption across teams.
- Design and build a Python-based distributed execution library that teams and tools can use to generate evidence in the required format.
- Drive efforts to onboard external scanning tools by guiding tool owners through integration, evidence formatting, and upload mechanisms.
- Collaborate with teams across the company to ensure high-quality evidence generation for software composition analysis and security insights.
- Write and maintain reliable, scalable components that operate in distributed systems using Python and Go.
- Contribute to the design and operation of large-scale, resilient scanning infrastructure.
- Potentially contribute to model development or tooling if experience with AI systems is applicable.
Requirements
- Bachelor's degree in Computer Science, Electrical Engineering, a relevant field, or equivalent experience.
- 5+ years working in a Software Engineer role.
- Strong proficiency in both Python and Go, with experience building production-grade libraries and services.
- Proven experience integrating and normalizing output from third-party or external tools.
- Hands-on experience defining and evolving data schemas, ideally with familiarity in CycloneDX or similar SBOM formats.
- Experience building tools that operate in distributed systems and can handle scale and fault tolerance.
- Ability to guide cross-functional teams, influence tool adoption, and drive schema compliance from non-reporting systems.
- Solid understanding of dependency management tools and ecosystems (e.g., pip, npm, Maven, Go modules).
- Experience with CI/CD environments and secure software development practices.
Ways to stand out
- Experience working with or building security scanning tools, such as SAST, DAST, SCA, or container scanners.
- Prior work integrating scanning tools into security platforms or developer toolchains.
- Familiarity with AI/ML model development, particularly in the context of code or vulnerability analysis.
- Contributions to open-source projects related to software supply chain, dependency analysis, or SBOM generation.
Compensation & Benefits
- Base salary range (Level 3): 136,000 USD - 212,750 USD.
- Base salary range (Level 4): 168,000 USD - 264,500 USD.
- You will also be eligible for equity and benefits (see NVIDIA benefits).
Additional information
- Applications for this job will be accepted at least until August 19, 2025.
- NVIDIA is an equal opportunity employer and values diversity in its workforce.