Nvidia Security Development Engineer 

United States, Texas 

597410056

What You’ll Be Doing:

• Develop backend services and data pipelines to identify software releases subject to FedRAMP and other regulatory requirements.

• Build platform features that automate evidence generation based on release context, policy coverage, and operational controls.

• Implement policy-as-code frameworks to evaluate compliance against FedRAMP baselines and track residual risks and mitigations.

• Present release readiness checklists for Security Owners, enabling them to assess gaps and work toward regulated release approval.

• Enable release teams to self-attest readiness for regulated environments via structured checklists, metadata tagging, and SDLC signal ingestion.

• Integrate with platforms across security scanning, logging, and access control to collect relevant compliance evidence.

• Help maintain NVIDIA’s FedRAMP-compliant security programs — including improving scanner coverage, implementing real-time dashboards, automating key processes, and ensuring on-time certification renewals.

• Create tools and APIs that display certification progress, identify gaps, and assist both internal customers and security experts and auditors.

What We Need to See:

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.

• 3+ years experience in software development, platform engineering, or security automation roles.

• Strong backend engineering skills in Python, Go, or similar languages.

• Familiarity with FedRAMP, NIST, or other U.S. regulatory frameworks.

• Experience designing and integrating RESTful APIs and working with containerized, cloud-native environments.

• Understanding of secure SDLC practices and the role of artifacts (e.g., SBOMs, logs, test evidence) in regulated certifications.

• Knowledge of policy-as-code tools and frameworks (e.g., Open Policy Agent) is a plus.

• Familiarity with SBOM standards, especially CycloneDX specification.

• Strong collaboration and interpersonal skills across security, compliance, and engineering teams.

• Passion for building automated, developer-friendly compliance platforms.

Ways to Stand Out From the Crowd:

• Experience working on or supporting FedRAMP certification processes for NVIDIA releases

• Prior work in mapping infrastructure and security controls to regulatory control baselines.