Senior Firmware Security Architect — Threat Modeling

NVIDIA Corporation; Santa Clara (CA); Sur place; USD 184 000 - 357 000; Plein temps

Résumé du poste

NVIDIA Corporation's Networking product security team seeks a technical security architect with hands-on experience to strengthen the security posture of networking firmware. You will partner with firmware, hardware, and architecture groups to reduce risk while enabling new security features affecting devices worldwide.

You will lead threat modeling, define security requirements, review designs, and drive secure development practices from provisioning to field updates.

Qualifications

• Academic degree in computer science, electrical engineering, or related field (or equivalent experience).
• Demonstrated experience of 8+ years in product security, firmware security, or security research, including hands-on work with embedded or firmware codebases.
• Experience defining security policy models — authorization schemes, RBAC, and administrative role separation — including how policy is expressed, enforced, and administered in production.
• Familiarity with applied cryptography (including secure boot, code signing, and attestation), threat modeling, common attack vectors, and mitigation techniques.

Responsabilités

• Be involved in the security architecture of NVIDIA Networking firmware — trust boundaries, privilege separation between firmware domains, device identity and key storage, secure boot and chain of trust, and secure update and anti‑rollback flows.
• Perform security threat modeling of firmware and embedded subsystems across NVIDIA Networking products.
• Analyze complex firmware and hardware/firmware interactions to identify security weaknesses, including boot flows, privileged execution environments, and host‑and network‑facing management interfaces.
• Define security features and mitigations spanning the full device lifecycle — provisioning, attestation, debug authorization, runtime hardening, and field update.
• Guide the engineering teams throughout the implementation.
• Translate threat models into actionable security requirements and architectural decisions, and review designs and implementations against them.

Connaissances

Security architecture

Threat modeling

Cryptography

Firmware security

Formation

Bachelor's degree in CS/EE or related field

MSc/PhD in related field

Outils

Static analysis tooling

Fuzzing

Firmware development tools

Description du poste

NVIDIA Corporation's Networking product security team seeks a technical security architect with hands-on experience to strengthen the security posture of networking firmware. You will partner with firmware, hardware, and architecture groups to reduce risk while enabling new security features affecting devices worldwide.

You will lead threat modeling, define security requirements, review designs, and drive secure development practices from provisioning to field updates.