NVIDIA is looking for a highly motivated and creative Offensive Security Researcher with deep experience in low-level system software (firmware, microcode, kernel drivers) to join the NVIDIA Offensive Security Research (OSR) team. You will attack our production GPU firmware and microcode, kernel drivers, and embedded software before adversaries do, and help design the mitigations that make the next attack harder.
NVIDIA silicon runs everything from AI data centers and confidential computing to automotive, networking, and gaming. Every chip we ship carries dozens of embedded control processors, most of them running our own RISC-V cores, and we have shipped more than a billion of them. Their firmware is the root of trust for the platform. OSR is responsible for the offensive view of that ecosystem: we find the bugs, build the exploits, and then work with architecture, hardware, and software teams to close whole bug classes with mitigations such as hardware Control-Flow Integrity, Pointer Masking, Memory Tagging, and formally verified code.
What you’ll be doing:
- Be responsible for the end-to-end security story for specific subcomponents, from threat model to hardening to verification.
- Design, prototype, and drive production adoption of new mitigation and hardening technologies (hardware CFI, Pointer Masking, Memory Tagging, and others).
- Build and evangelize tools, practices, and processes that raise product robustness across the company.
- Perform offensive security research across GPU and platform firmware, microcode, kernel drivers, and embedded software.
- Identify vulnerabilities, build proof-of-concept exploits, and partner with development teams to remediate them.
- Perform threat analysis and security reviews of software and hardware designs.
What we need to see:
- BS in Electrical or Computer Engineering, Computer Science, or equivalent experience.
- 12+ years of relevant software engineering or security research experience.
- Demonstrated experience in an offensive security role.
- Excellent C and assembly skills and hands-on low-level driver or firmware experience.
- Vulnerability research experience: fuzzing, static and dynamic analysis, exploit development, and coverage-guided techniques.
- Experience with secure development lifecycle practices such as threat modeling, code audit, and incident response.
- Experience applying AI and LLM-based tooling to vulnerability discovery, triage, or analysis.
- Ability to work collaboratively and remotely on complex, cross-team goals.
Ways to stand out from the crowd:
- Firmware or embedded reverse engineering, especially on RISC-V or other non-x86 architectures.
- Experience designing hardware or compiler-assisted mitigations from the ground up, including compiler modifications (LLVM, GCC).
- Familiarity with computer architecture fundamentals: caches, buses, memory controllers, DMA, MMUs, and IOMMUs.
- Experience with formally verifiable languages or methods (SPARK, Ada, Rust, model checking).
- Published research, such as talks at BH or DEF CON, or articles in publications like Phrack.
NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us. If you're creative, hardworking and self-motivated, we want to hear from you! NVIDIA is leading the way in groundbreaking developments in Artificial Intelligence, High-Performance Computing and Visualization. The GPU, our invention, serves as the visual cortex of modern computers and is at the heart of our products and services.
Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 224,000 USD - 356,500 USD for Level 5, and 272,000 USD - 431,250 USD for Level 6.You will also be eligible for equity and benefits.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.Skills Required
- Bachelor’s degree in Electrical Engineering, Computer Engineering, Computer Science, or equivalent experience
- 12+ years of relevant software engineering or security research experience
- Demonstrated experience in an offensive security role
- Excellent C and assembly skills
- Hands-on low-level driver or firmware experience
- Vulnerability research experience, including fuzzing, static analysis, dynamic analysis, exploit development, and coverage-guided techniques
- Experience with secure development lifecycle practices, threat modeling, code auditing, and incident response
- Experience applying AI and LLM-based tooling to vulnerability discovery, triage, or analysis
- Ability to collaborate remotely on complex, cross-team goals
- Firmware or embedded reverse engineering experience, particularly with RISC-V or non-x86 architectures
- Experience designing hardware or compiler-assisted mitigations, including LLVM or GCC modifications
- Knowledge of computer architecture, including caches, buses, memory controllers, DMA, MMUs, and IOMMUs
- Experience with formally verifiable languages or methods, including SPARK, Ada, Rust, or model checking
- Published security research, conference talks, or technical articles
NVIDIA Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about NVIDIA and has not been reviewed or approved by NVIDIA.
-
Equity Value & Accessibility — Equity awards and a discounted ESPP are highlighted as core parts of total compensation, enabling employees to share in the company’s success. Stock-based compensation and the two-year lookback ESPP are consistently described as especially valuable.
-
Healthcare Strength — Health coverage is portrayed as robust, with comprehensive medical, dental, and vision options alongside mental health support and on-site care resources. Employer HSA contributions and wellness perks reinforce the depth of the offering.
-
Retirement Support — Retirement programs are depicted as strong, featuring a meaningful 401(k) match with Roth options and support for Mega Backdoor Roth contributions. These elements position long-term savings as a notable advantage of the total rewards package.
NVIDIA Insights
What We Do
NVIDIA’s invention of the GPU in 1999 sparked the growth of the PC gaming market, redefined modern computer graphics, and revolutionized parallel computing. More recently, GPU deep learning ignited modern AI — the next era of computing — with the GPU acting as the brain of computers, robots, and self-driving cars that can perceive and understand the world. Today, NVIDIA is increasingly known as “the AI computing company.”
.png)
