Senior Security Engineer, RTOS and Virtualization

NVIDIA is a leading artificial intelligence computing company developing technologies for autonomous vehicles, machine learning, supercomputing, gaming, and visualization. The Senior Security Engineer will lead security engineering for RTOS, hypervisor, and embedded virtualization technologies, including architecture collaboration, defensive feature development, threat modeling, vulnerability analysis, fuzzing, and security testing.

Responsibilities:

• Lead security engineering for RTOS, hypervisor, and embedded virtualization technologies across design, implementation, review, and verification
• Collaborate on CPU and SoC architecture, including privilege levels, memory protection, DMA, interrupts, boot flows, debug controls, and hardware isolation
• Build and implement defensive features such as strong partitioning, least-privilege access, secure communication, fault containment, secure updates, and recovery from malicious inputs
• Perform threat modeling and automotive TARA, and connect risks, mitigations, requirements, tests, and evidence to security and safety standards
• Review low-level C/C++ code, investigate vulnerabilities, build fuzzing and security test infrastructure, and drive fixes into production

Requirements:

• 8+ years of hands-on experience in systems, embedded, platform, product, or automotive security
• BSEE/ BSCS degree or equivalent experience
• Experience securing RTOS, hypervisor, kernel, firmware, boot, driver, or other privileged software
• Strong C/C++ skills, with focus on memory safety, concurrency, resource ownership, privilege boundaries, and isolation
• Familiarity with CPU and SoC security concepts including MMU/SMMU or IOMMU, DMA, interrupts, boot, debug, and hardware-backed isolation
• Experience with threat modeling, vulnerability analysis, exploitability assessment, fuzzing, static or dynamic analysis, and security remediation
• Familiarity with automotive cybersecurity, safety, or process standards such as ISO/SAE 21434, UN R155, ISO 26262 interfaces, or Automotive SPICE
• Drove adoption of Rust, Ada/SPARK, formal methods, or other memory-safe and analyzable systems approaches
• Built capability-based or ownership-based security models for low-level systems
• Built security automation, fuzzing infrastructure, review agents, or AI-assisted tools used by engineering teams