Senior Vulnerability Management Analyst

NVIDIA•Us, CA

About The Position

NVIDIA’s Enterprise Vulnerability Management (VM) Team is seeking an analyst to improve vulnerability management and remediation across NVIDIA’s enterprise infrastructure and products. The role focuses on improving internal and external security response procedures, prioritizing public and internal vulnerability remediation, and coordinating with engineering and IT teams through end-to-end issue resolution. Products may include GPUs, cloud software, AI/ML, enterprise servers, automotive components, and embedded devices; expertise in these areas is not required, but flexibility and a broad understanding of device usage and requirements are desirable. The analyst will develop and improve VM processes, handle vulnerability receipt, resolution, and disclosure, communicate program status to internal and external management, and contribute to security disclosures and lower-severity security-impacting defect publications. The role also champions continuous improvement and engages with the broader security community to stay current with industry trends and requirements.

Requirements

Ability to quickly build knowledge while being mentored by leaders.
Ability to understand technical issues at a high level across a wide range of topics.
Leadership skills to identify and pursue resolutions that serve NVIDIA and its customers, including beyond the initial request.
Effective written and verbal communication with varied audiences and across issues of differing complexity.
Ability to work cross-functionally and remotely with other teams to accomplish sophisticated goals.
Experience with some of the following standards or processes: CVSS, CWE, SDLC, SBOM, VEX, CSAF, and threat modeling.
Knowledge of industry practices for responsible disclosure of security threats and product vulnerabilities.
Experience in a vulnerability management, security development lifecycle (SDL), or bug bounty management role.
BS/BA degree or equivalent experience.
Six or more years of experience in a security-related role.

Nice To Haves

Experience managing vulnerabilities in AI systems and infrastructure.
Ability to use AI systems to enhance or improve workflows.
Proven experience effectively and efficiently driving customer-facing issues, preferably security-related.
Understanding of software release processes such as Agile and unit testing.

Responsibilities

Craft and implement vulnerability management processes and program improvements.
Handle the receipt, resolution, and disclosure of security vulnerabilities across NVIDIA product lines.
Work with virtual security teams, engineering partners, and internal support teams to drive issues to long-term resolution.
Communicate the status of vulnerability management involvement to all levels of internal and external management.
Draft security vulnerability disclosures and publications concerning lower-severity security-impacting defects.
Champion continuous improvement efforts related to security activities across NVIDIA.
Engage with the broader industry security community and stay current with security trends and requirements.