Cyber Security Engineer

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Oversee incident response initiatives for corporate, cloud, and product environments, including investigation, containment, eradication, and recovery.

• Engage in threat hunting across endpoints, networks, and cloud workloads.

• Execute cloud incident response for AWS, Azure, GCP, Kubernetes, and containerized workloads.

• Carry out log analysis, identity compromise investigations, and workload forensics.

• Lead product security incident response in collaboration with engineering teams.

• Conduct digital forensics and malware analysis for investigations and root cause assessments.

• Create and enhance security orchestration and automation playbooks.

• Develop and improve detection and defense strategies utilizing threat models, attacker behaviors, and MITRE ATT&CK framework.

• Provide guidance to engineering and business teams regarding secure design and incident handling standards.

• Contribute to the formulation of security policies, standards, and metrics to strengthen NVIDIA’s security posture.

⛳️ Requirements

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.

• Over 8 years of practical experience in incident response and threat hunting, including in cloud environments.

• Strong understanding of cloud security principles, identity and access management, and workload protection.

• Experience with product security investigations, vulnerability analysis, and secure coding practices.

• Expertise in forensic analysis, intrusion detection, and threat intelligence.

• Advanced knowledge of network analysis, OS internals (Windows/Linux/macOS), and web application security, with the ability to identify abnormal behaviors and evaluate exploit paths.

• Capability to work independently and collaborate efficiently with global teams.

• Certifications such as GCIH, GCFA, AWS/Azure Security Specialty, CISSP.

• Familiarity with cloud-native security tools, including AWS GuardDuty, Azure Sentinel, and GCP Security Command Center.

• Development experience in Python, Go, or similar languages for creating security automation.

• Practical experience with container security (Docker, Kubernetes), CI/CD pipelines, and AI security.

• In-depth knowledge of digital forensics and malware reverse engineering.

🏝️ Benefits

• Equity

• Benefits