Nvidia Senior System Software Engineer - DevSecOps 

United States, Oregon 

452219837

What you’ll be doing:

• Ensuring NVIDIA's security practices align with relevant industry standards and regulations for data center products.

• Translating complex security requirements into actionable tasks and guidelines for development teams.

• Conducting periodic reviews of previous data center products to maintain ongoing security posture and compliance.

• Developing and maintaining advanced security scanners, including static application security testing (SAST) and open-source vulnerability scanners.

• Collaborating with cross-functional teams to integrate security tools and processes into NVIDIA's complex server platforms and AI/HPC software stack.

• Working closely with major customers, partners, and cloud service providers to align security requirements and roadmaps.

What we need to see:

• A bachelor’s or master’s degree in computer science, computer engineering, or a related field (or equivalent experience).

• 5+ years of experience in software security, with a focus on security tool development and implementation.

• Extensive knowledge of security principles, vulnerability response, and best practices in the software development lifecycle.

• Experience with SAST, DAST, and software composition analysis tools.

• Familiarity with legal, compliance, and regulations in the software industry.

• Strong understanding of threat modeling techniques and tools.

• Strong communication and interpersonal skills, with the ability to effectively collaborate with technical and non-technical stakeholders.

Ways to Stand Out from the Crowd:

• Background with NVIDIA data center systems (e.g., DGX, HGX) or similar complex server architectures. Experience leading DevSecOps or Security Compliance teams.

• Experience with cloud deployment models (e.g., virtualized, baremetal) and security threats associated with different models. Experience leading PSIRT or similar vulnerability response teams.

• Familiarity with GPU or DPU accelerator technologies. Knowledge of out-of-band and in-band management architectures in modern servers.