Senior System Software Engineer - Security

Description

The company invented the GPU in 1999 and now builds AI computing infrastructure. The Data Center Systems Software team works on the HGX, DGX and MGX platforms, which provide AI infrastructure at scale.

The team is looking for a software engineer with systems software and security experience to find and fix product vulnerabilities and to strengthen the Secure Development Lifecycle (SDL) practices used on these platforms.

Responsibilities

• Reproduce vulnerabilities, judge how exploitable and serious they are, and identify which products and software versions are affected.
• Evaluate vulnerabilities in third-party components and arrange dependency updates, mitigations, or documented exceptions.
• Push fixes forward on time with engineering owners and PSIRT Operations, covering risk ranking, escalation and coordinated disclosure.
• Write or review security fixes, check that mitigations work, add regression tests, and roll updates out across supported releases.
• Build automation that triages, analyzes and tracks vulnerabilities.
• Strengthen SDL practices through threat modeling, security design reviews and other best practices.
• Promote SDL practices across the company's data center software teams.

Requirements

• A BS or MS in Computer Science, Computer Engineering or a related field, or equivalent experience.
• At least 5 years of software or security engineering experience.
• Hands-on experience finding and fixing vulnerabilities, including working knowledge of CVSS scoring and CWE classification.
• Experience with secure development practices and security testing tools such as static analysis, fuzzing and software composition analysis.
• Familiarity with server firmware and systems software, and experience writing automation in Python or a similar language.
• Experience with modern AI and agents, and a habit of adopting new tools and techniques early.
• The ability to drive resolution across distributed, varied engineering teams.
• A solid grounding in embedded systems, enough to discuss firmware architecture, memory safety and hardware-software interfaces credibly.
• Strong written and verbal communication. Written communication is especially valued, since it keeps a remote team clear and builds institutional memory.
• Comfortable with ambiguity and complexity. You make sound decisions quickly with incomplete information and adjust course smoothly.

Conditions

Applications are accepted until at least October 30, 2026. This is an existing vacancy.

Base salary depends on location, experience and the pay of employees in similar roles. The base range is 152,000 USD to 241,500 USD for Level 3, and 184,000 USD to 287,500 USD for Level 4.

The company uses AI tools in parts of its recruiting process.

The company is an equal opportunity employer and does not discriminate on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other legally protected characteristic.

Benefits

• Nice to have: product security experience with modern data center systems.
• Nice to have: knowledge of secure boot, root of trust, attestation and related technologies such as UEFI, SPDM or TCG DICE.
• Nice to have: a record of improving SDL adoption or security automation across engineering teams.
• Nice to have: vulnerability research, security fixes or open-source security contributions.