Job description

NVIDIA’s invention of the GPU in 1999 sparked the growth of the PC gaming market, redefined modern computer graphics, and revolutionized parallel computing. GPU deep learning ignited the modern AI era — with NVIDIA hardware and software acting as the foundation for the world’s most ambitious AI, robotics, and autonomous systems workloads. Today, we are the AI computing company. NVIDIA Data Center Systems — including DGX, HGX, and MGX platforms — deliver the world’s leading infrastructure for AI at scale. We are growing our teams with the most thoughtful, creative, and driven people on the planet. NVIDIA is seeking a software engineer with systems software and security experience to join the Data Center Systems Software team. You will investigate and resolve product vulnerabilities and strengthen Secure Development Lifecycle (SDL) practices for platforms including HGX, DGX, and MGX. What You’ll Be Doing: • Investigate and reproduce vulnerabilities, assess exploitability and impact, and identify affected products and software versions. • Assess third-party vulnerabilities and coordinate dependency updates, mitigations, or documented exceptions. • Drive timely remediation with engineering owners and PSIRT Operations, including risk prioritization, escalation, and coordinated vulnerability disclosure. • Develop or review security fixes, validate mitigations, develop regression tests, and coordinate updates across supported releases. • Build automation for vulnerability triage, analysis, and tracking. • Improve SDL practices through threat modeling, security design reviews, and other best-practices. • Evangelize and drive SDL practices across NVIDIA data center software teams. What We Need to See: • BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience. • 5+ years of relevant software or security engineering experience. • Hands-on experience investigating and remediating vulnerabilities, including familiarity with CVSS scoring and CWE classification. • Experience with secure development practices and security testing tools, such as static analysis, fuzzing, and software composition analysis. • Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language. • Experience with modern AI and Agents, including AI-forward mindset and proactive adoption of cutting-edge tools and techniques. • The ability to drive resolution across distributed and diverse engineering teams. • Solid technical foundation in embedded systems, with the ability to engage credibly in technical discussions around firmware architecture, memory safety, and hardware-software interfaces. • Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a remote team. • Comfortable with ambiguity and complexity; you make sound decisions quickly with incomplete information and course-correct without friction. Ways to Stand Out from the Crowd: • Product security experience with modern data center systems. • Knowledge of secure boot, root of trust solutions, attestation, and related technologies such as UEFI, SPDM, or TCG DICE. • A track record of improving SDL adoption or security automation across engineering teams. • Demonstrated vulnerability research, security fixes, or open-source security contributions. NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us. If you're creative and autonomous, we want to hear from you! Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD for Level 3, and 184,000 USD - 287,500 USD for Level 4. You will also be eligible for equity and benefits . Applications for this job will be accepted at least until October 30, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes. NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

Requirements

Must-haves

Investigate and reproduce vulnerabilities, assess exploitability and impact, and identify affected products and software versions.
Assess third-party vulnerabilities and coordinate dependency updates, mitigations, or documented exceptions.
Drive timely remediation with engineering owners and PSIRT Operations, including risk prioritization, escalation, and coordinated vulnerability disclosure.
Develop or review security fixes, validate mitigations, develop regression tests, and coordinate updates across supported releases.
Build automation for vulnerability triage, analysis, and tracking.
Improve SDL practices through threat modeling, security design reviews, and other best-practices.
Evangelize and drive SDL practices across NVIDIA data center software teams.
BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience.
5+ years of relevant software or security engineering experience.
Hands-on experience investigating and remediating vulnerabilities, including familiarity with CVSS scoring and CWE classification.
Experience with secure development practices and security testing tools, such as static analysis, fuzzing, and software composition analysis.
Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language.
Experience with modern AI and Agents, including AI-forward mindset and proactive adoption of cutting-edge tools and techniques.
The ability to drive resolution across distributed and diverse engineering teams.
Solid technical foundation in embedded systems, with the ability to engage credibly in technical discussions around firmware architecture, memory safety, and hardware-software interfaces.
Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a remote team.
Comfortable with ambiguity and complexity; you make sound decisions quickly with incomplete information and course-correct without friction.
Product security experience with modern data center systems.
Knowledge of secure boot, root of trust solutions, attestation, and related technologies such as UEFI, SPDM, or TCG DICE.
A track record of improving SDL adoption or security automation across engineering teams.
Demonstrated vulnerability research, security fixes, or open-source security contributions.
You will also be eligible for equity and benefits .
Applications for this job will be accepted at least until October 30, 2026.
This posting is for an existing vacancy.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipython

Platform: eightfold
Effort: medium