GPU Kernel Security Engineer: Drive Firmware Hardening

NVIDIA Corporation

Santa Clara (CA)

On-site

USD 152,000 - 242,000

Full time

8 days ago

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

NVIDIA is seeking a strong security engineer to join the GPU System Software team in Santa Clara, CA. You will own and triage security issues across kernel and firmware, drive remediation, and lead security reviews to strengthen product robustness.

Qualified candidates have 5+ years in software security, excellent C and low-level experience, and a solid background in OS and architecture fundamentals. NVIDIA offers equity and comprehensive benefits.

Qualifications

Bachelor’s or Master’s degree in Computer Science, Engineering or equivalent experience.
5+ years of relevant industry software engineering experience.
Experience with security analysis of complex systems.
Demonstrated strong technical background.
excellent C programming and low-level driver experience.
Knowledge of operating systems and computer architecture fundamentals.
Strong communication, troubleshooting, and debugging skills.

Responsibilities

Own the security vulnerability backlog for kernel and firmware components, driving timely triage, remediation and SLA compliance.
Identify creative, scalable approaches to reduce backlog growth.
Lead a continuous security pipeline scanning, triage, root-cause analysis, remediation and validation across SW and FW components, communicate security risks to stakeholders effectively.
Communicate security risks, security posture and remediation progress through metrics, reports and stakeholder engagement.
Partner with engineering and security teams to define and execute long-term security strategy and product hardening efforts.
Drive and implement security reviews of software and hardware designs, assisting others to ensure the quality and robustness of our products.
Evaluate, recommend, and develop cutting edge security technologies, tools, and practices: static analysis for security enforcements, dynamic analysis solutions for fuzzing.