NVIDIA’s Enterprise Vulnerability Management (VM) Team is looking for a passionate and innovative Analyst to help us elevate our program to the next level. The analyst's main focus will be vulnerability management/remediation across NVIDIA’s enterprise infrastructure and products. The ideal candidate will improve NVIDIA’s internal/external security response procedures, prioritize both public and internal vulnerability remediation, and collaborate with engineering and IT teams to handle the end-to-end resolution of issues. Products can include GPUs, cloud software, AI/ML, enterprise servers, automotive components, embedded devices, and many others. Expertise in these areas is not required, but flexibility and a wide comprehension of device usage and requirements is desirable. As an NVIDIAn, you will be immersed in a diverse, supportive environment where everyone is encouraged to do their life’s work. Come join the team and see how you can make a lasting impact on the world!
What you’ll be doing:
- Craft and implement VM processes and program improvements to elevate NVIDIA’s vulnerability handling capabilities.
- Handle the receipt, resolution, and disclosure of security vulnerabilities across NVIDIA product lines.
- Engage directly with virtual security teams, engineering partners, and internal support teams to drive issues to long-term resolution
- Communicate status of VM involvement at all levels of management, both internal and external
- Draft publications for the security vulnerability disclosures as well as lower-severity security-impacting defects
- Champion continuous improvement efforts related to security activities across NVIDIA
- Engage with the broader industry security community and stay at the forefront of industry security trends and requirements
What we need to see:
- Ability to quickly scale knowledge while being mentored by leaders
- Ability to understand technical issues at a high level on a wide range of topics
- Leadership skills to step up and identify resolutions that are best for NVIDIA and its customers, even if that means going beyond the initial ask
- Effective written and verbal communication regardless of audience or issue complexity
- Ability to work cross-functionally and remotely with other teams to accomplish sophisticated goals
- Experience with some of the following standards or processes: CVSS, CWE, SDLC, SBOM, VEX, CSAF, threat modeling
- Knowledge of industry practices for responsible disclosure of security threats and product vulnerabilities
- Experience in a previous vulnerability management, security development lifecycle (SDL), or bug bounty management role
- Requires BS/BA degree or equivalent experience and 6+ years of experience in a security-related role
Ways to stand out from the crowd:
- Experience vulnerability management of AI systems and infrastructure.
- Ability to utilize AI systems to enhance or up-level workflows
- Proven experience driving customer-facing issues (security preferred) effectively and efficiently
- Understanding of software release processes, e.g. Agile, Unit Testing, etc.
You will also be eligible for equity and benefits.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.Skills Required
- Bachelor's degree or equivalent experience
- 6+ years of experience in a security-related role
- Experience in vulnerability management, security development lifecycle, or bug bounty management
- Experience with CVSS, CWE, SDLC, SBOM, VEX, CSAF, or threat modeling
- Knowledge of responsible disclosure practices for security threats and product vulnerabilities
- Ability to understand technical issues across diverse topics
- Effective written and verbal communication
- Ability to work cross-functionally and remotely
- Experience managing vulnerabilities in AI systems and infrastructure
- Ability to use AI systems to enhance workflows
- Experience driving customer-facing issues, preferably security-related
- Understanding of software release processes, Agile, and unit testing
NVIDIA Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about NVIDIA and has not been reviewed or approved by NVIDIA.
-
Equity Value & Accessibility — Equity awards and a discounted ESPP are highlighted as core parts of total compensation, enabling employees to share in the company’s success. Stock-based compensation and the two-year lookback ESPP are consistently described as especially valuable.
-
Healthcare Strength — Health coverage is portrayed as robust, with comprehensive medical, dental, and vision options alongside mental health support and on-site care resources. Employer HSA contributions and wellness perks reinforce the depth of the offering.
-
Retirement Support — Retirement programs are depicted as strong, featuring a meaningful 401(k) match with Roth options and support for Mega Backdoor Roth contributions. These elements position long-term savings as a notable advantage of the total rewards package.
NVIDIA Insights
What We Do
NVIDIA’s invention of the GPU in 1999 sparked the growth of the PC gaming market, redefined modern computer graphics, and revolutionized parallel computing. More recently, GPU deep learning ignited modern AI — the next era of computing — with the GPU acting as the brain of computers, robots, and self-driving cars that can perceive and understand the world. Today, NVIDIA is increasingly known as “the AI computing company.”
