Note: The job is a remote job and is open to candidates in USA. NVIDIA is seeking a Senior System Software Engineer to investigate and resolve vulnerabilities across its Data Center Systems platforms, including HGX, DGX, and MGX. The role drives vulnerability remediation and improves secure development practices across data center software teams.

Responsibilities

• Investigate and reproduce vulnerabilities, assess exploitability and impact, and identify affected products and software versions
• Assess third-party vulnerabilities and coordinate dependency updates, mitigations, or documented exceptions
• Drive timely remediation with engineering owners and PSIRT Operations, including risk prioritization, escalation, and coordinated vulnerability disclosure
• Develop or review security fixes, validate mitigations, develop regression tests, and coordinate updates across supported releases
• Build automation for vulnerability triage, analysis, and tracking
• Improve SDL practices through threat modeling, security design reviews, and other best-practices
• Evangelize and drive SDL practices across NVIDIA data center software teams

Skills

• BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience
• 5+ years of relevant software or security engineering experience
• Hands-on experience investigating and remediating vulnerabilities, including familiarity with CVSS scoring and CWE classification
• Experience with secure development practices and security testing tools, such as static analysis, fuzzing, and software composition analysis
• Familiarity with server firmware and systems software, plus experience building automation using Python or a comparable language
• Experience with modern AI and Agents, including AI-forward mindset and proactive adoption of cutting-edge tools and techniques
• The ability to drive resolution across distributed and diverse engineering teams
• Solid technical foundation in embedded systems, with the ability to engage credibly in technical discussions around firmware architecture, memory safety, and hardware-software interfaces
• Excellent written and verbal communication skills, with a strong preference for written communication that creates clarity and institutional memory for a remote team
• Comfortable with ambiguity and complexity; you make sound decisions quickly with incomplete information and course-correct without friction
• Product security experience with modern data center systems
• Knowledge of secure boot, root of trust solutions, attestation, and related technologies such as UEFI, SPDM, or TCG DICE
• A track record of improving SDL adoption or security automation across engineering teams
• Demonstrated vulnerability research, security fixes, or open-source security contributions

Benefits

• Eligible for equity

Company Overview

Company H1B Sponsorship