Senior App Security Engineer - Secure Developer Platforms

Engg; Santa Clara (CA); On-site; USD 224,000 - 357,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA's Autonomous Vehicle Infrastructure and Software Infrastructure teams in Santa Clara, CA seek an application security engineer to secure services, APIs, developer tools, and data platforms behind these workflows.

You will review designs, build threat models, implement authentication and authorization controls, and create reusable security libraries and CI/CD checks to make secure patterns easy to adopt.

Qualifications

• 12+ years of relevant experience and a BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience.
• Experience building and operating production software, with substantial work in application or product security.
• Strong programming skills in Go, Python, Java, C++, or a comparable language, and the ability to review and modify unfamiliar code.
• Practical understanding of web and API security, authentication, authorization, and common vulnerability classes.
• Experience with threat modeling and security reviews for distributed systems.
• Ability to turn security findings into concrete engineering changes and prioritize work based on risk and impact.

Responsibilities

• Review application designs and code, develop threat models, and help teams address security risks before deployment.
• Design and implement authentication and authorization controls for APIs, services, and applications, including service identities, tenant isolation, and resource-level access.
• Build reusable libraries, tooling, and reference implementations that make secure patterns straightforward to adopt.
• Improve how applications handle credentials, secrets, sensitive data, and security-relevant logging.
• Integrate practical security checks into development and CI/CD workflows, with actionable findings and clear remediation paths.
• Investigate application vulnerabilities, develop fixes with service owners, and add regression coverage.
• Partner with infrastructure and corporate security teams to prioritize improvements and measure their effectiveness.

Skills

Go

Python

Java

C++

Threat modeling

Security reviews

Communication

Education

BS in CS/CE

MS in CS/CE

Tools

Kubernetes

CI/CD

Cloud IAM

IaC (Terraform)

Job description

NVIDIA's Autonomous Vehicle Infrastructure and Software Infrastructure teams in Santa Clara, CA seek an application security engineer to secure services, APIs, developer tools, and data platforms behind these workflows.

You will review designs, build threat models, implement authentication and authorization controls, and create reusable security libraries and CI/CD checks to make secure patterns easy to adopt.