Senior Offensive Security Engineer, Automotive

NVIDIA•Santa Clara, CA

9d•$184,000 - $356,500

About The Position

NVIDIA’s Automotive Offensive Security team works to secure sophisticated automotive operating systems by identifying vulnerabilities and developing tools to find them at scale. The Senior Offensive Security Engineer will assess and uncover vulnerabilities in source code and binaries, focusing on low-level technologies including operating system kernels, hypervisors, boot ROMs, firmware, and hardware. The role also involves turning security research insights into reusable capabilities through automation. The engineer will develop security pipelines, fuzzing infrastructure, AI-assisted vulnerability discovery, automated code-inspection tools, and code-conversion tools. They will collaborate with security researchers and engineers and own tool development from prototype through production for use across the software organization.

Requirements

At least 7 years of hands-on programming experience, particularly with C/C++.
A bachelor’s degree or equivalent experience in Computer Science or a related field.
A strong low-level systems security background in areas such as OS internals, kernels, hypervisors, firmware, or hardware, including an analytical approach to dissecting complex software and identifying security flaws.
Experience with embedded software engineering.
Deep understanding of foundational computer science concepts and security principles.
Experience building automated security tooling, including fuzzers, sanitizers, and static or dynamic analysis at source and binary levels.
Knowledge of current operating system architectures and security frameworks, particularly Linux.
Proven understanding of x86 and ARM architecture.
Hands-on experience developing and building agentic AI systems, including multi-agent orchestration and tool-use pipelines, and applying them to automate security or engineering workflows.

Nice To Haves

Proficiency in Python and a memory-safe language such as Rust or Ada/SPARK.
Involvement in CTF competitions, bug bounty contributions, published security research, or personal software projects.
Extensive experience with formal methods or memory-safe languages such as Ada/SPARK, Rust, TLA+, or Lean for hardening low-level code and architecture.
Knowledge of RISC-V.

Responsibilities

Discover and evaluate vulnerabilities in source code and binaries.
Assess low-level technologies, including OS kernels, hypervisors, boot ROMs, firmware, and hardware.
Develop and build automation to scale security research.
Build security pipelines, fuzzing infrastructure, AI-assisted vulnerability discovery, automated code-inspection tools, and code-conversion tools.
Work closely with security researchers and engineers.
Own security tool development from prototype through production for use across the software organization.