Offensive Security Engineer, GPU - Software
 Durham, NC

NVIDIA is searching for a highly motivated, creative engineer with experience in system software to join the GPU Software team. You will focus on offensive security efforts in on our production GPU kernel driver and embedded software.

What you'll be doing:

  • You will identify vulnerabilities in our production kernel and embedded software, building proof of concepts, and working with development teams to re-mediate
  • You will evaluate, recommend, and develop improvements to current tools and practices as security testing with an eye to offensive practices (Penetration testing, injection, fuzzing and abuse related attack models)
  • Evangelize and drive adoption of new or improved tools, practices, and plans to increase product robustness and reliability

What we need to see:

  • Demonstrated security experience in either a forensic or an offensive security focused role
  • Consistently demonstrates focus on continuous improvement driving resolutions through closed-loop actions
  • Effective written and verbal communication regardless of audience or issue complexity
  • Ability to work collaboratively and remotely with others to accomplish complex goals
  • Requires BS/BA degree or equivalent industry experience and 6+ years in the Software development or Security related field
  • Excellent C programming and low-level driver experience.
  • You are an asset if you have familiarity with computer system architecture, microprocessor, and microcontroller fundamentals (caches, buses, memory controllers, DMA, etc).
  • Kernel experience with Linux, Android, Chrome, or Windows systems.

Ways to stand out from the crowd:

  • Experience with System reversing and exploitation
  • Experience with microarchitectural attacks (side channels, fault injection, etc)
  • Experience with secure code quality practices and tooling to support quick engagements and rapid analysis - static analysis tools (Coverity, Checkmarx, or similar), dynamic scanning (Rapid 7, AppSider, or similar), Fuzzing (AFL, Peach, or similar) and code coverage (Bullseye, LDRA, etc)
  • Experience with penetration techniques and tools
  • Understanding of software development lifecycle best practices, e.g. threat modeling, unit testing, incident response, etc.

NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us. If you're creative, passionate and self-motivated, we want to hear from you!

NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression , sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.