Senior System Software Engineer – Security

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Conduct investigations and replicate vulnerabilities, evaluate their exploitability and impact, and pinpoint the affected products and software versions.

• Evaluate vulnerabilities from third-party sources and manage updates for dependencies, mitigations, or formally documented exceptions.

• Facilitate prompt remediation efforts with engineering stakeholders and PSIRT Operations, focusing on risk prioritization, escalation, and collaborative vulnerability disclosure.

• Create or review security patches, validate mitigations, develop regression tests, and synchronize updates across supported releases.

• Develop automation tools for vulnerability triage, analysis, and monitoring.

• Enhance SDL practices by engaging in threat modeling, security design reviews, and implementing other best practices.

• Advocate for and promote SDL practices throughout NVIDIA's data center software teams.

⛳️ Requirements

• A Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related discipline, or equivalent professional experience.

• Over 5 years of pertinent experience in software or security engineering.

• Practical experience in investigating and addressing vulnerabilities, including knowledge of CVSS scoring and CWE classification.

• Familiarity with secure development methodologies and security testing tools, such as static analysis, fuzzing, and software composition analysis.

• Understanding of server firmware and systems software, along with experience in building automation using Python or a similar programming language.

• Experience with contemporary AI technologies and Agents, demonstrating an AI-forward mindset and willingness to adopt innovative tools and techniques.

• Capability to drive problem resolution across diverse and distributed engineering teams.

• Strong technical background in embedded systems, encompassing firmware architecture, memory safety, and hardware-software interfaces.

• Exceptional written and verbal communication skills, with a strong preference for written communication that fosters clarity and a shared knowledge base for remote teams.

• Comfort in handling ambiguity and complexity; ability to make swift, sound decisions with incomplete information and adjust course with ease.

• Experience in product security related to modern data center systems.

• Knowledge of secure boot, root of trust solutions, attestation, UEFI, SPDM, or TCG DICE.

• Proven track record of enhancing SDL adoption or security automation across engineering teams.

• Demonstrated experience in vulnerability research, security patches, or contributions to open-source security projects.

🏝️ Benefits

• Equity

• Comprehensive benefits