Want to know if this job is worth applying to?
California, United States
Onsite
NVIDIA, widely recognized as one of the world’s most desirable employers, believes open-weight models are foundational to American AI leadership, cybersecurity, and defense through broad scientific scrutiny. As part of this mission, our AI Safety & Security Engineering team builds and evaluates AI-powered tooling that finds, validates, and patches software vulnerabilities, recognizing that finding a bug is only the beginning. We are seeking a Security Research Engineer to advance our Validate and Patch capabilities by establishing what counts as a confirmed vulnerability and defining what constitutes a truly correct, safe fix. In this critical role, you will apply rigorous security judgment to well-defined categories of vulnerabilities. These affect NVIDIA-internal targets. You will turn complex analysis into repeatable methods that improve software people rely on daily.
Validation here requires meticulous care to confirm reports are real and reachable rather than noise, while patching requires ensuring fixes repair flaws, protect existing behavior, and hold up under strict revalidation. Working alongside harness and evaluation engineers, you will establish high engineering standards, document your reasoning for independent security reviews, and ensure your methods run reliably with fully traceable evidence. AI-assisted workflows are an integral part of this job, but so is maintaining a healthy, disciplined skepticism about their outputs. Beyond immediate fixes, your work will teach the entire program what trustworthy patching looks like while actively helping decide which vulnerability classes the team tackles next. Ultimately, we hold our results to an exceptionally high bar and value specific, verifiable proof of your technical expertise—such as CVEs, advisories, or original security tools—over polished phrasing.
What You'll Be Doing:
Validation methods: Develop techniques that confirm vulnerabilities are real and reachable.
Patch methods: Advance approaches for generating and verifying safe fixes.
Quality standards: Define correctness, regression, and revalidation standards with reviewers.
Applied research: Work bounded vulnerability classes against internal targets.
What We Need To See:
Bachelor's degree (or equivalent experience) with 12+ years in security research or software engineering.
Security foundations: Hands-on vulnerability research, fuzzing, program analysis, or secure development in C, C++, or Python.
Fix quality: Rigor about what makes a fix correct and safe, including regression and behavior preservation.
AI-assisted workflows: Comfort using AI-assisted tools for analysis and development.
Ways to Stand Out from the Crowd:
Public research: CVEs, advisories, or publications in vulnerability research.
Analysis tooling: Experience building or extending fuzzers, static analyzers, or symbolic-execution tools.
Agentic ML: Familiarity with LLM-based coding or analysis agents.
With competitive salaries and a generous benefits package, NVIDIA is widely considered to be one of the technology industry's most desirable employers. We have some of the most forward-thinking and versatile people in the world working with us, and our engineering teams are growing fast in some of the most impactful fields of our generation: Confidential Computing and Data. If you're a creative engineer who enjoys autonomy and shares our passion for technology, we want to hear from you.
You will also be eligible for equity and benefits.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.