Senior Vulnerability Management Analyst

at Nvidia

📍 United States

USD 160,000-258,800 per year

SENIOR

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

AI @ 4 Agile @ 4 Communication @ 6 GPU Leadership @ 6 Machine Learning Security @ 4

Details

NVIDIA’s Enterprise Vulnerability Management (VM) Team is looking for a passionate and innovative analyst to help elevate its program. The primary focus is vulnerability management and remediation across NVIDIA’s enterprise infrastructure and products, including GPUs, cloud software, AI/ML, enterprise servers, automotive components, and embedded devices. The role involves improving internal and external security response procedures, prioritizing public and internal vulnerability remediation, and collaborating with engineering and IT teams on end-to-end issue resolution.

Responsibilities

Craft and implement vulnerability management processes and program improvements.
Handle the receipt, resolution, and disclosure of security vulnerabilities across NVIDIA product lines.
Engage with virtual security teams, engineering partners, and internal support teams to drive issues to long-term resolution.
Communicate vulnerability management status to all levels of internal and external management.
Draft publications for security vulnerability disclosures and lower-severity security-impacting defects.
Champion continuous improvement efforts related to security activities across NVIDIA.
Engage with the broader industry security community and stay current with security trends and requirements.

Requirements

Ability to quickly expand knowledge while being mentored by leaders.
Ability to understand technical issues at a high level across a wide range of topics.
Leadership skills to identify resolutions that are best for NVIDIA and its customers, including going beyond the initial request when necessary.
Effective written and verbal communication with audiences of varying technical expertise.
Ability to work cross-functionally and remotely with other teams to accomplish complex goals.
Experience with some of the following standards or processes: CVSS, CWE, SDLC, SBOM, VEX, CSAF, and threat modeling.
Knowledge of industry practices for responsible disclosure of security threats and product vulnerabilities.
Experience in vulnerability management, security development lifecycle (SDL), or bug bounty management.
Bachelor’s degree or equivalent experience.
Six or more years of experience in a security-related role.

Preferred Qualifications

Experience with vulnerability management for AI systems and infrastructure.
Ability to use AI systems to enhance or improve workflows.
Proven experience driving customer-facing issues, preferably security-related, effectively and efficiently.
Understanding of software release processes, including Agile and unit testing.

Compensation and Benefits

The base salary range is USD 160,000–258,750 per year, determined by location, experience, and compensation for employees in similar positions. The role is also eligible for equity and benefits.