Security Software Engineer, Vulnerability Operations

NVIDIA is a technology company seeking a Security Software Engineer to operate and improve its AI-powered vulnerability operations platform. The role focuses on maintaining scanning operations, building full-stack platform features, improving vulnerability data quality, managing GitOps deployments, and supporting LLM-based security scanning and verification tools.

What you'll do:

• Supporting day-to-day operations of our vulnerability management hub and its two AI scanning engines: monitoring scan fleets and worker queues, investigating stuck or failed scans, and shipping fixes
• Building and maintaining features across the stack — Python/FastAPI backend services, React/TypeScript frontends, and Postgres data models
• Triaging platform feedback from security engineers and repo owners: reproducing bugs, running data reconciliations in SQL, and closing the loop with users
• Operating our GitOps deployment pipeline (Kubernetes/OpenShift, ArgoCD, Vault) — shipping releases to staging and production, rotating secrets, and validating rollouts
• Improving scan coverage and data quality: asset inventory across GitLab/GitHub/Gerrit/Perforce, ownership attribution, finding lifecycle and dedup logic
• Working alongside senior engineers on the LLM agent harnesses that power scanning and verification, and learning how agentic security tooling is built and operated

What they're looking for:

• Bachelor's degree in CS/Engineering or equivalent experience
• 1–3 years of software engineering experience (internships count), with solid Python fundamentals
• Working knowledge of SQL and relational databases
• Comfort in a Linux/Git environment and a willingness to debug across unfamiliar systems
• Interest in security — you don't need to be a security expert yet, but you should want to become one
• Strong ownership instincts: you follow problems to root cause and communicate clearly along the way
• Frontend experience with React and TypeScript
• Exposure to containers and orchestration (Docker, Kubernetes, ArgoCD/GitOps) or job-queue/worker architectures (Redis, Celery/ARQ)
• Hands-on experience with LLM APIs, agent frameworks, or coding agents (Claude Code, Codex, opencode, or similar)
• Security fundamentals: CTF participation, security coursework, bug bounty writeups, or certifications like Security+ or eJPT
• Contributions to open-source projects or a portfolio of shipped side projects

Benefits:

• You will also be eligible for equity and benefits.