Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
AI @ 4
Communication @ 7
Python @ 3
Security @ 4
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
NVIDIA is seeking a software engineer with systems software and security experience to join the Data Center Systems Software team. The role focuses on investigating and resolving product vulnerabilities and strengthening Secure Development Lifecycle (SDL) practices for platforms including HGX, DGX, and MGX.
Responsibilities
- Investigate and reproduce vulnerabilities, assess exploitability and impact, and identify affected products and software versions.
- Assess third-party vulnerabilities and coordinate dependency updates, mitigations, or documented exceptions.
- Drive timely remediation with engineering owners and PSIRT Operations, including risk prioritization, escalation, and coordinated vulnerability disclosure.
- Develop or review security fixes, validate mitigations, develop regression tests, and coordinate updates across supported releases.
- Build automation for vulnerability triage, analysis, and tracking.
- Improve SDL practices through threat modeling, security design reviews, and other best practices.
- Evangelize and drive SDL practices across NVIDIA data center software teams.
Requirements
- BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience.
- 5+ years of relevant software or security engineering experience.
- Hands-on experience investigating and remediating vulnerabilities, including familiarity with CVSS scoring and CWE classification.
- Experience with secure development practices and security testing tools, such as static analysis, fuzzing, and software composition analysis.
- Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language.
- Experience with modern AI and agents, including an AI-forward mindset and proactive adoption of cutting-edge tools and techniques.
- Ability to drive resolution across distributed and diverse engineering teams.
- Solid technical foundation in embedded systems, with the ability to engage credibly in technical discussions around firmware architecture, memory safety, and hardware-software interfaces.
- Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a remote team.
- Comfort with ambiguity and complexity, sound decision-making with incomplete information, and the ability to course-correct without friction.
Preferred Qualifications
- Product security experience with modern data center systems.
- Knowledge of secure boot, root of trust solutions, attestation, and related technologies such as UEFI, SPDM, or TCG DICE.
- A track record of improving SDL adoption or security automation across engineering teams.
- Demonstrated vulnerability research, security fixes, or open-source security contributions.
Compensation And Benefits
The base salary range is USD 152,000–241,500 for Level 3 and USD 184,000–287,500 for Level 4. Base salary is determined based on location, experience, and the pay of employees in similar positions. The role also includes eligibility for equity and benefits.
Applications will be accepted at least until October 30, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes and is committed to fostering an inclusive work environment and providing equal employment opportunity.