Security Software Engineer, Vulnerability Operations

NVIDIA•Us, CA

4d•Onsite

About The Position

NVIDIA's Vulnerability Operations organization is looking for a Security Software Engineer to help operate and improve our AI-powered vulnerability operations platform. This platform uses LLM agents to scan tens of thousands of repositories and live web applications across NVIDIA, then unifies, verifies, and routes those findings to the engineers who can fix them. You'll join a small, fast-moving team and own real production responsibilities from day one — keeping the scanning fleet healthy, improving the triage experience, and making the data trustworthy.

Requirements

Bachelor's degree in CS/Engineering or equivalent experience
1–3 years of software engineering experience (internships count), with solid Python fundamentals
Working knowledge of SQL and relational databases
Comfort in a Linux/Git environment and a willingness to debug across unfamiliar systems
Interest in security — you don't need to be a security expert yet, but you should want to become one
Strong ownership instincts: you follow problems to root cause and communicate clearly along the way

Nice To Haves

Frontend experience with React and TypeScript
Exposure to containers and orchestration (Docker, Kubernetes, ArgoCD/GitOps) or job-queue/worker architectures (Redis, Celery/ARQ)
Hands-on experience with LLM APIs, agent frameworks, or coding agents (Claude Code, Codex, opencode, or similar)
Security fundamentals: CTF participation, security coursework, bug bounty writeups, or certifications like Security+ or eJPT
Contributions to open-source projects or a portfolio of shipped side projects

Responsibilities

Supporting day-to-day operations of our vulnerability management hub and its two AI scanning engines: monitoring scan fleets and worker queues, investigating stuck or failed scans, and shipping fixes.
Building and maintaining features across the stack — Python/FastAPI backend services, React/TypeScript frontends, and Postgres data models
Triaging platform feedback from security engineers and repo owners: reproducing bugs, running data reconciliations in SQL, and closing the loop with users
Operating our GitOps deployment pipeline (Kubernetes/OpenShift, ArgoCD, Vault) — shipping releases to staging and production, rotating secrets, and validating rollouts
Improving scan coverage and data quality: asset inventory across GitLab/GitHub/Gerrit/Perforce, ownership attribution, finding lifecycle and dedup logic
Working alongside senior engineers on the LLM agent harnesses that power scanning and verification, and learning how agentic security tooling is built and operated