Senior AppSec Engineer: Secure APIs & Developer Tools

NVIDIA Corporation; Santa Clara (CA); On-site; USD 224,000 - 357,000; Full time

Benefits offered by this job

Equity

Job summary

NVIDIA Corporation is seeking an Application Security Engineer to secure services, APIs, developer tools, and data platforms behind NVIDIA's workflows. You will work with software engineers and security teams to identify risks, build protections, and embed security across the SDLC.

You will review designs, implement authentication/authorization for APIs and services, and build reusable security tooling. Role emphasizes threat modeling, secure logging, and CI/CD security integration as part of

Qualifications

• 12+ years of relevant experience in software security or related field.
• Experience building and operating production software with emphasis on application or product security.
• Strong programming skills in Go, Python, Java, C++, or a comparable language and ability to review unfamiliar code.

Responsibilities

• Review designs and code, develop threat models, and address security risks before deployment.
• Design and implement authentication and authorization controls for APIs and services.
• Build reusable libraries, tooling, and reference implementations for secure patterns.
• Improve handling of credentials, secrets, and sensitive data; enhance security-relevant logging.
• Integrate security checks into development and CI/CD workflows with actionable findings.
• Investigate vulnerabilities and drive fixes with owners, adding regression coverage.
• Collaborate with infrastructure and security teams to measure improvements and prioritize risk-based actions.

Skills

Go

Python

Java

C++

Security

Education

BS or MS in Computer Science or Computer Engineering

Tools

Kubernetes

Cloud IAM

Infrastructure as Code

CI/CD pipelines

Job description

NVIDIA Corporation is seeking an Application Security Engineer to secure services, APIs, developer tools, and data platforms behind NVIDIA's workflows. You will work with software engineers and security teams to identify risks, build protections, and embed security across the SDLC.

You will review designs, implement authentication/authorization for APIs and services, and build reusable security tooling. Role emphasizes threat modeling, secure logging, and CI/CD security integration as part of