Senior Security Engineer, RTOS and Virtualization

NVIDIA•Redmond, WA

1d•$184,000 - $356,500

About The Position

Within NVIDIA DRIVE Software, the Hypervisor and RTOS Team contributes significantly to NVIDIA's advancement in artificial intelligence and autonomous vehicles. Our mission is to manage system resource sharing and separation while fulfilling real-time, safety, and security needs. We design Hypervisor and RTOS focusing on automotive quality, safety, and security required by the real-time, highly reliable system parts of leading Autonomous Vehicles. We are hiring now for the position of Senior Security Engineer, RTOS and Virtualization.

Requirements

8+ years of hands-on experience in systems, embedded, platform, product, or automotive security.
BSEE/ BSCS degree or equivalent experience
Experience securing RTOS, hypervisor, kernel, firmware, boot, driver, or other privileged software.
Strong C/C++ skills, with focus on memory safety, concurrency, resource ownership, privilege boundaries, and isolation.
Familiarity with CPU and SoC security concepts including MMU/SMMU or IOMMU, DMA, interrupts, boot, debug, and hardware-backed isolation.
Experience with threat modeling, vulnerability analysis, exploitability assessment, fuzzing, static or dynamic analysis, and security remediation.
Familiarity with automotive cybersecurity, safety, or process standards such as ISO/SAE 21434, UN R155, ISO 26262 interfaces, or Automotive SPICE.

Nice To Haves

Drove adoption of Rust, Ada/SPARK, formal methods, or other memory-safe and analyzable systems approaches.
Built capability-based or ownership-based security models for low-level systems.
Built security automation, fuzzing infrastructure, review agents, or AI-assisted tools used by engineering teams.

Responsibilities

Lead security engineering for RTOS, hypervisor, and embedded virtualization technologies across design, implementation, review, and verification.
Collaborate on CPU and SoC architecture, including privilege levels, memory protection, DMA, interrupts, boot flows, debug controls, and hardware isolation.
Build and implement defensive features such as strong partitioning, least-privilege access, secure communication, fault containment, secure updates, and recovery from malicious inputs.
Perform threat modeling and automotive TARA, and connect risks, mitigations, requirements, tests, and evidence to security and safety standards.
Review low-level C/C++ code, investigate vulnerabilities, build fuzzing and security test infrastructure, and drive fixes into production.