[Remote] Security Software Engineer, Vulnerability Operations
Note: The job is a remote job and is open to candidates in USA. NVIDIA is seeking a Security Software Engineer to support and improve its AI-powered vulnerability operations platform. The role involves operating scanning infrastructure, building backend and frontend features, improving vulnerability data quality, managing deployments, and contributing to LLM-powered security tooling.
Responsibilities
- Supporting day-to-day operations of our vulnerability management hub and its two AI scanning engines: monitoring scan fleets and worker queues, investigating stuck or failed scans, and shipping fixes
- Building and maintaining features across the stack — Python/FastAPI backend services, React/TypeScript frontends, and Postgres data models Triaging platform feedback from security engineers and repo owners: reproducing bugs, running data reconciliations in SQL, and closing the loop with users
- Operating our GitOps deployment pipeline (Kubernetes/OpenShift, ArgoCD, Vault) — shipping releases to staging and production, rotating secrets, and validating rollouts
- Improving scan coverage and data quality: asset inventory across GitLab/GitHub/Gerrit/Perforce, ownership attribution, finding lifecycle and dedup logic
- Working alongside senior engineers on the LLM agent harnesses that power scanning and verification, and learning how agentic security tooling is built and operated
Skills
- Bachelor's degree in CS/Engineering or equivalent experience
- 1–3 years of software engineering experience (internships count), with solid Python fundamentals
- Working knowledge of SQL and relational databases
- Comfort in a Linux/Git environment and a willingness to debug across unfamiliar systems
- Interest in security — you don't need to be a security expert yet, but you should want to become one
- Strong ownership instincts: you follow problems to root cause and communicate clearly along the way
- Frontend experience with React and TypeScript
- Exposure to containers and orchestration (Docker, Kubernetes, ArgoCD/GitOps) or job-queue/worker architectures (Redis, Celery/ARQ)
- Hands-on experience with LLM APIs, agent frameworks, or coding agents (Claude Code, Codex, opencode, or similar)
- Security fundamentals: CTF participation, security coursework, bug bounty writeups, or certifications like Security+ or eJPT
- Contributions to open-source projects or a portfolio of shipped side projects
Benefits
- You will also be eligible for equity
- You will also be eligible for benefits
Company Overview
Company H1B Sponsorship