Senior Software Engineer - Scanner Automation

NVIDIA • Durham, NC

15h

About The Position

NVIDIA Product Security Team is seeking a passionate and innovative Software Engineer. We build several security platforms and integrate third party solutions to catalog NVIDIA programs, detect vulnerabilities, drive remediation response, securely deploy into our cloud environments, and innovate to meet the scale and demand of all of NVIDIA’s product teams. We are driven to provide key security solutions for our organization. What you will be doing: Building and maintaining a scalable, distributed platform for automated security and quality scanning that integrates seamlessly with CI/CD pipelines across a range of services and environments. Designing and developing foundational libraries and APIs that standardize how security evidence is generated, formatted, and ingested—enabling internal and external tools to integrate smoothly with our systems. Defining and evolving evidence schemas and data models that enable accurate, consistent, and scalable insights into application security and software composition. Building robust services—primarily in Python and Go—that operate reliably in distributed, cloud-native environments, leveraging Docker, Kubernetes, and infrastructure-as-code practices. Collaborating closely with developers and platform teams to understand workflows and problems, delivering solutions that enhance developer productivity, software reliability, and security posture. Driving cross-functional initiatives that influence how scanning and quality insights are integrated across the SDLC, with visibility and impact at the organizational level. A successful candidate thrives on working closely with other software developers to understand their workflows and build platforms and tools that improve developer efficiency, security, and reliability. This role offers the opportunity to drive broad technical impact, collaborate across teams, and deliver important insights to engineering leadership.

Requirements

• Bachelor’s degree in Computer Science, Electrical Engineering, a relevant field, or equivalent experience.
• 5+ years working in a Software Engineer role.
• 2+ years of proven experience in software development, building end-to-end applications, infrastructure, and automation frameworks at scale.
• Experience with designing and implementing scalable, resilient services for large-scale scanning services, enabling efficient processing of code, artifacts, and datasets across distributed environments.
• Experience working with RESTful APIs
• Experience deploying to cloud technologies/infrastructure
• Experience with Kubernetes and Docker
• Knowledge of professional software engineering practices & standard methodologies for the software development process, including documentation and task management, coding standards, code reviews, source control management, build processes, testing, operations, and generation of critical metrics.

Nice To Haves

• Experience working with or building security scanning tools, such as SAST, DAST, SCA, or container scanners.
• Prior work integrating scanning tools into security platforms or developer toolchains.
• Contributions to open-source projects related to software supply chain, a variety of package managers, dependency analysis, or SBOM generation.
• Experience with building and integrating systems for CSAM detection across large-scale image datasets leveraging PhotoDNA

Responsibilities

• Building and maintaining a scalable, distributed platform for automated security and quality scanning that integrates seamlessly with CI/CD pipelines across a range of services and environments.
• Designing and developing foundational libraries and APIs that standardize how security evidence is generated, formatted, and ingested—enabling internal and external tools to integrate smoothly with our systems.
• Defining and evolving evidence schemas and data models that enable accurate, consistent, and scalable insights into application security and software composition.
• Building robust services—primarily in Python and Go—that operate reliably in distributed, cloud-native environments, leveraging Docker, Kubernetes, and infrastructure-as-code practices.
• Collaborating closely with developers and platform teams to understand workflows and problems, delivering solutions that enhance developer productivity, software reliability, and security posture.
• Driving cross-functional initiatives that influence how scanning and quality insights are integrated across the SDLC, with visibility and impact at the organizational level.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level