Security Research Engineer, AI Safety and Security Engineering

2100 NVIDIA USA; Santa Clara (CA); On-site; USD 152,000 - 241,500; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA in Santa Clara, CA is seeking a Security Research Engineer to advance patching and vulnerability validation in our AI Safety & Security Engineering team. You will apply rigorous security judgment to well-defined categories of vulnerabilities, establishing high engineering standards with traceable evidence.

With competitive compensation, equity, and benefits, you will work alongside experts to improve our internal targets and ensure fixes preserve existing behavior while defending against

Qualifications

• 5+ years in security research or software engineering.
• Hands-on vulnerability research, fuzzing, program analysis, or secure development in C, C++, or Python.
• Rigor about what makes a fix correct and safe, including regression and behavior preservation.

Responsibilities

• Validate vulnerabilities are real and reachable.
• Develop and verify safe fixes for patches.
• Define correctness, regression, and revalidation standards with reviewers.
• Work on vulnerability classes against internal targets.

Skills

Security research

Fuzzing

Program analysis

C/C++

Python

AI-assisted tooling

Education

Bachelor's degree

Tools

Fuzzers

Static analyzers

Symbolic execution tools

Job description

NVIDIA, widely recognized as one of the world’s most desirable employers, believes open-weight models are foundational to American AI leadership, cybersecurity, and defense through broad scientific scrutiny. As part of this mission, our AI Safety & Security Engineering team builds and evaluates AI-powered tooling that finds, validates, and patches software vulnerabilities, recognizing that finding a bug is only the beginning. We are seeking a Security Research Engineer to advance our Validate and Patch capabilities by establishing what counts as a confirmed vulnerability and defining what constitutes a truly correct, safe fix. In this critical role, you will apply rigorous security judgment to well-defined categories of vulnerabilities. These affect NVIDIA-internal targets. You will turn complex analysis into repeatable methods that improve software people rely on daily.

Validation here requires meticulous care to confirm reports are real and reachable rather than noise, while patching requires ensuring fixes repair flaws, protect existing behavior, and hold up under strict revalidation. Working alongside harness and evaluation engineers, you will establish high engineering standards, document your reasoning for independent security reviews, and ensure your methods run reliably with fully traceable evidence. AI-assisted workflows are an integral part of this job, but so is maintaining a healthy, disciplined skepticism about their outputs. Beyond immediate fixes, your work will teach the entire program what trustworthy patching looks like while actively helping decide which vulnerability classes the team tackles next. Ultimately, we hold our results to an exceptionally high bar and value specific, verifiable proof of your technical expertise—such as CVEs, advisories, or original security tools—over polished phrasing.

What You'll Be Doing:

• Validation methods: Develop techniques that confirm vulnerabilities are real and reachable.
• Patch methods: Advance approaches for generating and verifying safe fixes.
• Quality standards: Define correctness, regression, and revalidation standards with reviewers.
• Applied research: Work bounded vulnerability classes against internal targets.

What We Need To See:

• Bachelor's degree (or equivalent experience) with 5+ years in security research or software engineering.
• Security foundations: Hands-on vulnerability research, fuzzing, program analysis, or secure development in C, C++, or Python.
• Fix quality: Rigor about what makes a fix correct and safe, including regression and behavior preservation.
• AI-assisted workflows: Comfort using AI-assisted tools for analysis and development.

Ways to Stand Out from the Crowd:

• Public research: CVEs, advisories, or publications in vulnerability research.
• Analysis tooling: Experience building or extending fuzzers, static analyzers, or symbolic-execution tools.
• Agentic ML: Familiarity with LLM-based coding or analysis agents.

With competitive salaries and a generous benefits package, NVIDIA is widely considered to be one of the technology industry's most desirable employers. We have some of the most forward-thinking and versatile people in the world working with us, and our engineering teams are growing fast in some of the most impactful fields of our generation: Confidential Computing and Data. If you're a creative engineer who enjoys autonomy and shares our passion for technology, we want to hear from you.

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD.

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until July 30, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.