New offer - be the first one to apply!
August 16, 2025
Senior • Hybrid • On-site • Remote
$136,000 - $212,750/yr
Santa Clara, CA , +2
NVIDIA Product Security Team is seeking a passionate and innovative Software Engineer. We build several security platforms and integrate third party solutions to catalog NVIDIA programs, detect vulnerabilities, drive remediation response, securely deploy into our cloud environments, and innovate to meet the scale and demand of all of NVIDIA’s product teams. We are driven to provide key security solutions for our organization.
What you will be doing:
Integrate third-party scanning tools into a platform, working with external teams to ensure outputs align with our evidence schema and ingestion pipeline.
Define and maintain schemas (e.g., CycloneDX) for structured evidence generation and consumption across teams.
Design and build a Python-based distributed execution library that teams and tools can use to generate evidence in our required format.
Drive efforts to onboard external scanning tools by guiding tool owners through integration, evidence formatting, and upload mechanisms.
Collaborate with teams across the company to ensure high-quality evidence generation for software composition analysis and security insights.
Write and maintain reliable, scalable components that operate in distributed systems in Python and Go.
Contribute to the design and operation of large-scale, resilient scanning infrastructure.
Potentially contribute to model development or tooling if experience with AI systems is applicable.
What we need to see:
Bachelor’s degree in Computer Science, Electrical Engineering, a relevant field, or equivalent experience.
5+ years working in a Software Engineer role.
Strong proficiency in both Python and Go, with experience building production-grade libraries and services.
Proven experience integrating and normalizing output from third-party or external tools.
Hands-on experience defining and evolving data schemas, ideally with familiarity in CycloneDX or similar SBOM formats.
Experience building tools that operate in distributed systems and can handle scale and fault tolerance.
Ability to guide cross-functional teams, influence tool adoption, and drive schema compliance from non-reporting systems.
Solid understanding of dependency management tools and ecosystems (e.g., pip, npm, Maven, Go modules).
Experience with CI/CD environments and secure software development practices.
Ways to stand out from the crowd:
Experience working with or building security scanning tools, such as SAST, DAST, SCA, or container scanners.
Prior work integrating scanning tools into security platforms or developer toolchains.
Familiarity with AI/ML model development, particularly in the context of code or vulnerability analysis.
Contributions to open-source projects related to software supply chain, dependency analysis, or SBOM generation.
You will also be eligible for equity and benefits.