Senior Offensive Security Engineer, Automotive

NVIDIA•Us, CA

About The Position

NVIDIA's Automotive Offensive Security team believes the best defense is a good offense. Securing a sophisticated automotive operating system means finding vulnerabilities then building the tooling needed to find them at scale. We're looking for a senior engineer who can break low-level systems and then automate the insights gained from doing so into reusable security capabilities. You'll discover and evaluate vulnerabilities on both source code and binaries, focusing on low-level technologies such as OS kernels, Hypervisor, boot ROMs, firmware, and hardware. More than just bug finding, you'll develop and build automation to scale your work. This includes security pipelines, fuzzing infrastructure, AI-assisted vulnerability discovery, tools for automated code inspection, and code conversion. You'll work closely with security researchers and engineers, owning tool development - from prototype to production - for use across the software organization.

Requirements

7+ years of hands on programming experience, particularly with C/C++.
B.S. or equivalent experience in Computer Science or a related field.
Strong low-level systems security background: OS internals, kernels, hypervisors, firmware, or hardware; applying an analytical approach dissecting the functionality of intricate software and identifying security flaws.
Experience with embedded software engineering.
Deep understanding of foundational computer science concepts and security principles.
Experience building automated security tooling: fuzzers, sanitizers, static/dynamic analysis at the source and binary level.
Knowledge of current operating system architectures and security frameworks, with a particular focus on Linux.
Proven understanding of x86 and ARM architecture.
Hands-on experience developing and building agentic AI systems: multi-agent orchestration, tool-use pipelines, and applying them to automate security or engineering workflows.

Nice To Haves

Python and memory safe language (e.g. Rust, Ada/SPARK) proficiency a plus.
Involvement in CTF competitions, bug bounty contributions, published security research, or personal software projects.
Extensive experience with formal methods or memory-safe languages (e.g. Ada/SPARK, Rust, TLA+, Lean) for hardening low-level code and architecture.
RISC-V knowledge is a strong plus.

Responsibilities

Discover and evaluate vulnerabilities on both source code and binaries, focusing on low-level technologies such as OS kernels, Hypervisor, boot ROMs, firmware, and hardware.
Develop and build automation to scale work, including security pipelines, fuzzing infrastructure, AI-assisted vulnerability discovery, tools for automated code inspection, and code conversion.
Work closely with security researchers and engineers, owning tool development - from prototype to production - for use across the software organization.