As part of this mission, our AI Safety & Security Engineering team builds and evaluates AI-powered tooling that finds, validates, and patches software vulnerabilities, recognizing that finding a bug is only the beginning. We are seeking a Security Research Engineer to advance our Validate and Patch capabilities by establishing what counts as a confirmed vulnerability and defining what constitutes a truly correct, safe fix. In this critical role, you will apply rigorous security judgment to well-defined categories of vulnerabilities. These affect NVIDIA-internal targets. You will turn complex analysis into repeatable methods that improve software people rely on daily.
Validation here requires meticulous care to confirm reports are real and reachable rather than noise, while patching requires ensuring fixes repair flaws, protect existing behavior, and hold up under strict revalidation. Working alongside harness and evaluation engineers, you will establish high engineering standards, document your reasoning for independent security reviews, and ensure your methods run reliably with fully traceable evidence. AI-assisted workflows are an integral part of this job, but so is maintaining a healthy, disciplined skepticism about their outputs. Beyond immediate fixes, your work will teach the entire program what trustworthy patching looks like while actively helping decide which vulnerability classes the team tackles next. Ultimately, we hold our results to an exceptionally high bar and value specific, verifiable proof of your technical expertise-such as CVEs, advisories, or original security tools-over polished phrasing.
What You'll Be Doing:- Validation methods: Develop techniques that confirm vulnerabilities are real and reachable.
- Patch methods: Advance approaches for generating and verifying safe fixes.
- Quality standards: Define correctness, regression, and revalidation standards with reviewers.
- Applied research: Work bounded vulnerability classes against internal targets.
What We Need To See:- Bachelor's degree (or equivalent experience) with 5+ years in security research or software engineering.
- Security foundations: Hands-on vulnerability research, fuzzing, program analysis, or secure development in C, C++, or Python.
- Fix quality: Rigor about what makes a fix correct and safe, including regression and behavior preservation.
- AI-assisted workflows: Comfort using AI-assisted tools for analysis and development.
Ways to Stand Out from the Crowd:- Public research: CVEs, advisories, or publications in vulnerability research.
- Analysis tooling: Experience building or extending fuzzers, static analyzers, or symbolic-execution tools.
- Agentic ML: Familiarity with LLM-based coding or analysis agents.
Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD.
You will also be eligible for equity and benefits.
Applications for this job will be accepted at least until July 30, 2026.
This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
