NVIDIA Product Security Team is seeking a passionate and innovative Software Engineer. We build several security platforms and integrate third party solutions to catalog NVIDIA programs, detect vulnerabilities, drive remediation response, securely deploy into our cloud environments, and innovate to meet the scale and demand of all of NVIDIA’s product teams. We are driven to provide key security solutions for our organization.
What you will be doing:
Integrate third-party scanning tools into a platform, working with external teams to ensure outputs align with our evidence schema and ingestion pipeline.
Define and maintain schemas (e.g., CycloneDX) for structured evidence generation and consumption across teams.
Design and build a Python-based distributed execution library that teams and tools can use to generate evidence in our required format.
Drive efforts to onboard external scanning tools by guiding tool owners through integration, evidence formatting, and upload mechanisms.
Collaborate with teams across the company to ensure high-quality evidence generation for software composition analysis and security insights.
Write and maintain reliable, scalable components that operate in distributed systems in Python and Go.
Contribute to the design and operation of large-scale, resilient scanning infrastructure.
Potentially contribute to model development or tooling if experience with AI systems is applicable.
What we need to see:
Bachelor’s degree in Computer Science, Electrical Engineering, a relevant field, or equivalent experience.
5+ years working in a Software Engineer role.
Strong proficiency in both Python and Go, with experience building production-grade libraries and services.
Proven experience integrating and normalizing output from third-party or external tools.
Hands-on experience defining and evolving data schemas, ideally with familiarity in CycloneDX or similar SBOM formats.
Experience building tools that operate in distributed systems and can handle scale and fault tolerance.
Ability to guide cross-functional teams, influence tool adoption, and drive schema compliance from non-reporting systems.
Solid understanding of dependency management tools and ecosystems (e.g., pip, npm, Maven, Go modules).
Experience with CI/CD environments and secure software development practices.
Ways to stand out from the crowd:
Experience working with or building security scanning tools, such as SAST, DAST, SCA, or container scanners.
Prior work integrating scanning tools into security platforms or developer toolchains.
Familiarity with AI/ML model development, particularly in the context of code or vulnerability analysis.
Contributions to open-source projects related to software supply chain, dependency analysis, or SBOM generation.
You will also be eligible for equity and benefits.
Top Skills
Similar Jobs
What you need to know about the Los Angeles Tech Scene
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering