Senior Vulnerability Management & Response Engineer

NVIDIA Corporation; Sacramento (CA); On-site; USD 160,000 - 259,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA Corporation seeks an Analyst for its Enterprise Vulnerability Management (VM) team. You will drive vulnerability management across NVIDIA’s enterprise infrastructure and products, prioritizing remediation and coordinating with engineering and IT for end-to-end resolution.

The role emphasizes improving internal/external security response, maintaining communication with stakeholders, and contributing to industry-leading vulnerability disclosure practices.

Qualifications

• Ability to understand technical issues at a high level across a wide range of topics.
• Experience with security standards and processes (CVSS, CWE, SDLC, SBOM, VEX, CSAF).
• Knowledge of responsible disclosure practices and product vulnerabilities.

Responsibilities

• Craft and implement vulnerability management processes and program improvements.
• Handle receipt, resolution, and disclosure of security vulnerabilities across NVIDIA product lines.
• Collaborate with security, engineering, and IT teams to drive issues to long-term resolution.
• Communicate status of VM activities to management and external stakeholders.
• Draft publications for security vulnerability disclosures and defects with security impact.
• Champion continuous improvement in NVIDIA's security activities and industry practices.

Skills

Leadership skills

Technical understanding

Written communication

Cross-functional collaboration

Threat modeling

CSAF/VEX knowledge

SDL/bug bounty experience

Education

BS/BA degree or equivalent experience

Job description

NVIDIA Corporation seeks an Analyst for its Enterprise Vulnerability Management (VM) team. You will drive vulnerability management across NVIDIA’s enterprise infrastructure and products, prioritizing remediation and coordinating with engineering and IT for end-to-end resolution.

The role emphasizes improving internal/external security response, maintaining communication with stakeholders, and contributing to industry-leading vulnerability disclosure practices.