NVIDIA Product Security Team is seeking a passionate and innovative Software Engineer. We build several security platforms and integrate third party solutions to catalog NVIDIA programs, detect vulnerabilities, drive remediation response, securely deploy into our cloud environments, and innovate to meet the scale and demand of all of NVIDIA’s product teams. We are driven to provide key security solutions for our organization.What you will be doing:<ul><li>Integrate third-party scanning tools into a platform, working with external teams to ensure outputs align with our evidence schema and ingestion pipeline.</li><li>Define and maintain schemas (e.g., CycloneDX) for structured evidence generation and consumption across teams.</li><li>Design and build a Python-based distributed execution library that teams and tools can use to generate evidence in our required format.</li><li>Drive efforts to onboard external scanning tools by guiding tool owners through integration, evidence formatting, and upload mechanisms.</li><li>Collaborate with teams across the company to ensure high-quality evidence generation for software composition analysis and security insights.</li><li>Write and maintain reliable, scalable components that operate in distributed systems in Python and Go.</li><li>Contribute to the design and operation of large-scale, resilient scanning infrastructure.</li><li>Potentially contribute to model development or tooling if experience with AI systems is applicable.</li></ul>What we need to see:<ul><li>Bachelor’s degree in Computer Science, Electrical Engineering, a relevant field, or equivalent experience.</li><li>5+ years working in a Software Engineer role. </li><li>Strong proficiency in both Python and Go, with experience building production-grade libraries and services.</li><li>Proven experience integrating and normalizing output from third-party or external tools.</li><li>Hands-on experience defining and evolving data schemas, ideally with familiarity in CycloneDX or similar SBOM formats.</li><li>Experience building tools that operate in distributed systems and can handle scale and fault tolerance.</li><li>Ability to guide cross-functional teams, influence tool adoption, and drive schema compliance from non-reporting systems.</li><li>Solid understanding of dependency management tools and ecosystems (e.g., pip, npm, Maven, Go modules).</li><li>Experience with CI/CD environments and secure software development practices.</li></ul>Ways to stand out from the crowd:<ul><li>Experience working with or building security scanning tools, such as SAST, DAST, SCA, or container scanners.</li><li>Prior work integrating scanning tools into security platforms or developer toolchains.</li><li>Familiarity with AI/ML model development, particularly in the context of code or vulnerability analysis.</li><li>Contributions to open-source projects related to software supply chain, dependency analysis, or SBOM generation.</li></ul>Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 136,000 USD - 212,750 USD for Level 3, and 168,000 USD - 264,500 USD for Level 4.<div><div><div><div><div><div><div>You will also be eligible for equity and <a href="https://www.nvidia.com/en-us/benefits/" target="_blank">benefits</a>.</div></div></div></div></div></div></div>Applications for this job will be accepted at least until August 19, 2025.NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.