Jobs · Information Technology · California

Security Engineer, GPU Kernel Driver

Thomas To · Santa Clara, CA · 4 wk ago
Information TechnologyFull-time
We need to output HTML fragment with sections: About the role? The posting includes intro about NVIDIA, then description of role, responsibilities, requirements, ways to stand out, benefits, pay, schedule? There's mention of salary range, equity, benefits, but not schedule. So we include sections: About the role (maybe not needed? The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We should include sections only when posting has real specific content. We have content for responsibilities (What You'll Be Doing). Requirements (What We Need To See). Ways To Stand Out could be Skills or Qualifications. Benefits and Pay are present. Schedule not present, so omit. We must not repeat job title as heading. No Job ID. Remove boilerplate like EEO, etc. Also remove application instructions (Applications for this job will be accepted at least until October 3, 2026.) That's application instruction? It's a deadline; maybe considered application instruction? The instruction says remove application instructions. So we should remove that line. Also remove NVIDIA uses AI tools in its recruiting processes, equal opportunity employer statements, etc. Also remove cookie/navigation/legal/EEO boilerplate. Also remove "Widely considered to be one of the technology world’s most desirable employers, NVIDIA offers highly competitive salaries and a comprehensive benefits package. As you plan your future, see what we can offer to you and your family www.nvidiabenefits.com/" That's benefits info; we can keep benefits but maybe rephrase? We must preserve all substantive information; we can keep that sentence but maybe we need to format as Benefits section. The sentence includes a link; we can keep as plain text? Probably keep as is but without markdown. It's okay. Pay: The base salary range is given. Also mention equity and benefits. So Pay section. We need to use
  • for any list of duties/requirements/benefits. So for responsibilities list, we need
    • . For requirements list, also
      • . For ways to stand out maybe also list. Benefits maybe list? The benefits description is not a list but we could keep as

        . However instruction: Use

        • for any list of duties/requirements/benefits. If benefits are not a list, we can use

          . But we could also list benefits items? Not given. So just

          . We must not create sections with filler like "commensurate with experience". Not present. Let's extract content. Intro paragraph: "NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world." That's about the company and role; could be "About the role". We'll put that in

          About the role

          and then

          with that paragraph. Next: "We are searching for a strong, dedicated, creative security engineer to join our GPU System Software team at NVIDIA . You will join an inclusive team of motivated security engineers who develop mitigations, conduct security research, and build advanced security platforms and frameworks. These tools help find vulnerabilities at scale in some of the most complex systems software worldwide. This is an outstanding opportunity to contribute to the foundation of gaming, professional graphics, and the cloud. Our GPUs power breakthroughs in AI, data centers, accelerated computing, healthcare, intelligent networking, and more. Join us to help maintain an industry-leading security posture for these groundbreaking products!" This could also be part of About the role or Responsibilities? Might be better to keep as part of About the role. We'll combine. Then "What You'll Be Doing" list: we need to extract each bullet. List: - Own the security vulnerability backlog for kernel and firmware components, driving timely triage, remediation and SLA compliance; identify creative, scalable approaches to reduce backlog growth - Lead a continuous security pipeline scanning, triage, root-cause analysis, remediation and validation across SW and FW components, communicate security risks to stakeholders effectively - Communicate security risks, security posture and remediation progress through metrics, reports and stakeholder engagement - Partner with engineering and security teams to define and execute long-term security strategy and product hardening efforts - Drive and implement security reviews of software and hardware designs, assisting others to ensure the quality and robustness of our products - Evaluate, recommend, and develop cutting edge security technologies, tools, and practices: static analysis for security enforcements, dynamic analysis solutions for fuzzing We'll put under

          Responsibilities

          with
          • each. Next: "What We Need To See" list: - Bachelor’s or Master’s degree in Computer Science, Engineering or equivalent experience - 5+ years of relevant industry software engineering experience - Experience with security analysis of complex systems - Demonstrated strong technical background; excellent C programming and low-level driver experience - Knowledge of operating systems and computer architecture fundamentals - Strong communication, troubleshooting, and debugging skills We'll put under

            Requirements

            with
            • . Next: "Ways To Stand Out From The Crowd" list: - Experience with secure code quality practices and tooling to support quick engagements and rapid analysis: static analysis tools (Coverity, Checkmarx, or similar), dynamic scanning (Rapid 7, AppSider, or similar), Fuzzing (AFL, Peach, or similar), code coverage (Bullseye, LDRA, etc.) - Experience applying AI/LLM-based tools and agentic workflows - Experience with vulnerability research - Understanding of secure software development lifecycle standard methodologies, e.g. threat modeling, unit testing, incident response, etc. - Shown skills in working in large geographically distributed teams We could put under

              Skills

              or

              Qualifications

              . The instruction list includes Qualifications, Skills. We'll choose Skills. Next benefits: "Widely considered to be one of the technology world’s most desirable employers, NVIDIA offers highly competitive salaries and a comprehensive benefits package. As you plan your future, see what we can offer to you and your family www.nvidiabenefits.com/" We'll put under

              Benefits

              with

              that sentence. Pay: "Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD for Level 3, and 184,000 USD - 287,500 USD for Level 4. You will also be eligible for equity and benefits." We'll put under

              Pay

              with

              . We must not include schedule. We must remove boilerplate: "Applications for this job will be accepted at least until October 3, 2026." remove. Also remove "This posting is for an existing vacancy." maybe not needed but it's not boilerplate? It's minor metadata; we can drop. Also remove "NVIDIA uses AI tools in its recruiting processes." remove. Also remove equal opportunity statements. Also remove "NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer." remove. Also remove the long EEO list. Also remove "As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law." remove. Also remove "Your base salary will be determined based on your location, experience, and the pay of employees in similar positions." That's part of Pay, we keep. Now produce HTML fragment. We need to ensure no extra whitespace? It's fine. Let's craft:

              About the role

              NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. We are searching for a strong, dedicated, creative security engineer to join our GPU System Software team at NVIDIA. You will join an inclusive team of motivated security engineers who develop mitigations, conduct security research, and build advanced security platforms and frameworks. These tools help find vulnerabilities at scale in some of the most complex systems software worldwide. This is an outstanding opportunity to contribute to the foundation of gaming, professional graphics, and the cloud. Our GPUs power breakthroughs in AI, data centers, accelerated computing, healthcare, intelligent networking, and more. Join us to help maintain an industry-leading security posture for these groundbreaking products!

              Responsibilities

              • Own the security vulnerability backlog for kernel and firmware components, driving timely triage, remediation and SLA compliance; identify creative, scalable approaches to reduce backlog growth
              • Lead a continuous security pipeline scanning, triage, root-cause analysis, remediation and validation across SW and FW components, communicate security risks to stakeholders effectively
              • Communicate security risks, security posture and remediation progress through metrics, reports and stakeholder engagement
              • Partner with engineering and security teams to define and execute long-term security strategy and product hardening efforts
              • Drive and implement security reviews of software and hardware designs, assisting others to ensure the quality and robustness of our products
              • Evaluate, recommend, and develop cutting edge security technologies, tools, and practices: static analysis for security enforcements, dynamic analysis solutions for fuzzing

              Requirements

              • Bachelor’s or Master’s degree in Computer Science, Engineering or equivalent experience
              • 5+ years of relevant industry software engineering experience
              • Experience with security analysis of complex systems
              • Demonstrated strong technical background; excellent C programming and low-level driver experience
              • Knowledge of operating systems and computer architecture fundamentals
              • Strong communication, troubleshooting, and debugging skills

              Skills

              • Experience with secure code quality practices and tooling to support quick engagements and rapid analysis: static analysis tools (Coverity, Checkmarx, or similar), dynamic scanning (Rapid 7, AppSider, or similar), Fuzzing (AFL, Peach, or similar), code coverage (Bullseye, LDRA, etc.)
              • Experience applying AI/LLM-based tools and agentic workflows
              • Experience with vulnerability research
              • Understanding of secure software development lifecycle standard methodologies, e.g. threat modeling, unit testing, incident response, etc.
              • Shown skills in working in large geographically distributed teams

              Benefits

Similar jobs

GPU Kernel Engineer

SciforiumSan Francisco, CA· 1 mo ago
Engineering$190k–$250k/yrapply on jobs.ashbyhq.com