Senior Firmware Security Engineer
Job Description
NVIDIA’s GPU Firmware team is seeking a Senior Firmware Security Engineer to help design and secure GPU boot firmware, the root of trust for our products. This role focuses on strengthening firmware security posture across the GPU lifecycle, under strict boot-time and storage constraints. You will contribute to both the technical depth of device firmware and the systems that help the team build, test, and validate security.
What you’ll do
- Design, develop, test, debug, and optimize GPU firmware across the entire GPU lifecycle
- Continuously evaluate and improve the security posture of firmware and hardware that establish the root of trust
- Strengthen team software process and core infrastructure by enhancing build systems, regression farms, and security test infrastructure
- Participate in in-depth security reviews spanning software, hardware, process, and infrastructure
- Support security requirements and solutions by engaging with industry standards such as NIST, Open Compute Project, and DMTF, and by aligning with key customers and partners
- Collaborate with NVIDIA and third-party vendor hardware and software teams to improve security across hardware, BootROMs, and software stacks
- Work with a larger virtual security team on other portions of the GPU stack as needed
What we’re looking for
- BS or MS degree in EE/CS/CE (or equivalent experience)
- 5+ years experience developing device BIOS, firmware, or other low-level software
- 2+ years experience building secure firmware and working with hardware security components
- Strong C skills
- Secure software fundamentals including cryptography, authentication/attestation, chains of trust, and awareness of common software security vulnerabilities
- Comfort working closely with both hardware designers and other software engineers to deliver functional and non-functional aspects of GPU subsystems
Stand out with
- Experience with threat modeling, formal design analysis, hardware/firmware architecture, and other defensive security work
- Background using secure development techniques such as attack-trees, static/dynamic analysis, fuzzing, and negative testing
- Experience developing for safety critical platforms
- Experience with formal verification
- Passion for the work
Eligibility and compensation
Location: Santa Clara, CA (onsite). Salary: USD 152,000 - 241,500 per year. You will also be eligible for equity and benefits.
Technologies
C, cryptography, authentication/attestation, chains of trust