Senior System Software Engineer - Security

NVIDIA•Santa Clara, CA

About The Position

NVIDIA is seeking a software engineer with systems software and security experience to join its Data Center Systems Software team. The role investigates and resolves product vulnerabilities and strengthens Secure Development Lifecycle (SDL) practices for platforms including HGX, DGX, and MGX. The engineer works with engineering owners and PSIRT Operations to coordinate vulnerability response and remediation, and helps improve security practices across data center software teams.

Requirements

Bachelor’s or master’s degree in Computer Science, Computer Engineering, or a related field, or equivalent experience.
At least 5 years of relevant software or security engineering experience.
Hands-on experience investigating and remediating vulnerabilities, including familiarity with CVSS scoring and CWE classification.
Experience with secure development practices and security testing tools such as static analysis, fuzzing, and software composition analysis.
Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language.
Experience with modern AI and agents, an AI-forward mindset, and proactive adoption of cutting-edge tools and techniques.
Ability to drive resolution across distributed and diverse engineering teams.
Solid technical foundation in embedded systems and ability to engage in technical discussions around firmware architecture, memory safety, and hardware-software interfaces.
Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a remote team.
Comfort with ambiguity and complexity; ability to make sound decisions quickly with incomplete information and course-correct without friction.

Nice To Haves

Product security experience with modern data center systems.
Knowledge of secure boot, root of trust solutions, attestation, and related technologies such as UEFI, SPDM, or TCG DICE.
Track record of improving Secure Development Lifecycle adoption or security automation across engineering teams.
Demonstrated vulnerability research, security fixes, or open-source security contributions.

Responsibilities

Investigate and reproduce vulnerabilities, assess exploitability and impact, and identify affected products and software versions.
Assess third-party vulnerabilities and coordinate dependency updates, mitigations, or documented exceptions.
Drive timely remediation with engineering owners and PSIRT Operations, including risk prioritization, escalation, and coordinated vulnerability disclosure.
Develop or review security fixes, validate mitigations, develop regression tests, and coordinate updates across supported releases.
Build automation for vulnerability triage, analysis, and tracking.
Improve Secure Development Lifecycle practices through threat modeling, security design reviews, and other best practices.
Evangelize and drive Secure Development Lifecycle practices across NVIDIA data center software teams.