Senior System Software Engineer - Security

NVIDIA•Santa Clara, CA

1d•$152,000 - $287,500

About The Position

NVIDIA is seeking a software engineer with systems software and security experience to join the Data Center Systems Software team. The role investigates and resolves product vulnerabilities and strengthens Secure Development Lifecycle (SDL) practices for HGX, DGX, and MGX platforms. The engineer works with engineering owners and PSIRT Operations to assess risk, drive remediation, and coordinate vulnerability disclosure; develops or reviews fixes and regression tests; builds security automation; and promotes SDL practices across NVIDIA data center software teams.

Requirements

BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience.
5+ years of relevant software or security engineering experience.
Hands-on experience investigating and remediating vulnerabilities, including familiarity with CVSS scoring and CWE classification.
Experience with secure development practices and security testing tools, such as static analysis, fuzzing, and software composition analysis.
Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language.
Experience with modern AI and Agents, including an AI-forward mindset and proactive adoption of cutting-edge tools and techniques.
Ability to drive resolution across distributed and diverse engineering teams.
Solid technical foundation in embedded systems, including the ability to engage credibly in technical discussions around firmware architecture, memory safety, and hardware-software interfaces.
Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a remote team.
Comfort with ambiguity and complexity; ability to make sound decisions quickly with incomplete information and course-correct without friction.

Nice To Haves

Product security experience with modern data center systems.
Knowledge of secure boot, root of trust solutions, attestation, and related technologies such as UEFI, SPDM, or TCG DICE.
A track record of improving SDL adoption or security automation across engineering teams.
Demonstrated vulnerability research, security fixes, or open-source security contributions.

Responsibilities

Investigate and reproduce vulnerabilities, assess exploitability and impact, and identify affected products and software versions.
Assess third-party vulnerabilities and coordinate dependency updates, mitigations, or documented exceptions.
Drive timely remediation with engineering owners and PSIRT Operations, including risk prioritization, escalation, and coordinated vulnerability disclosure.
Develop or review security fixes, validate mitigations, develop regression tests, and coordinate updates across supported releases.
Build automation for vulnerability triage, analysis, and tracking.
Improve Secure Development Lifecycle (SDL) practices through threat modeling, security design reviews, and other best practices.
Evangelize and drive SDL practices across NVIDIA data center software teams.