出海雷达

Senior Firmware Security Architect, Networking

开发工程限定地区(需当地身份)
公司NVIDIA
薪资$184,000 - $356,500/年
工作地点Canada, United States
地域资格限定地区(需当地身份)
时区要求日间重叠约 9 小时,基本正常作息
用工类型Full Time
发布时间今天
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制:该职位明确限定在 Canada、United States 招聘。如果你是位于中国大陆的求职者,通常需要当地工作身份才能投递,或需与雇主确认是否接受独立合同(Contractor)形式合作。
关于本页中文:职位描述由本机离线模型翻译,属机器翻译,供快速判断用;正式沟通与投递请以英文原文为准。官方翻译通道恢复后会自动重译升级。

作为 NVIDIA 网络产品安全团队,我们正在寻找一位拥有实践经验的杰出技术安全架构师来帮助我们改善 NVIDIA 网页产品的安全姿势。在这个角色中,你将与固件,硬件和建筑团队合作在安全架构上,同时减少风险,威胁和漏洞,同时驱动全球数百万设备影响的新安全功能!你会做什么:· 参与 NVIDIA 网络固件的安全架构,信任界限,固件域之间的特权分离,设备身份和关键存储,安全启动和信任链以及安全更新和反滚动流程。· 在 NVIDIA 网页产品中执行固件和嵌入式子系统的安全威胁建模。·分析复杂的固件和硬件/固件互动以确定安全弱点,包括启动流程,特权执行环境以及主机和网络面向管理接口。· 定义整个设备生命周期的安全功能和减轻措施提供,认证,调试授权,运行时间硬化和现场更新。在整个实施过程中指导工程团队。· 将威胁模型转换为可操作的安全要求和架构决策,并审查设计和实现。· 与硬件和 ASIC 建筑师合作,以指定安全原始化的固件依赖,并确定它们在产品线上如何使用。· 推动固件安全开发实践 C 中存储安全编码模式,静态分析和对固件暴露的界面模糊并确保开发过程符合安全和编码标准。我们需要看到的是:·计算机科学,电气工程或相关领域学术学位 (或相等经验). · 在产品安全,固件安全或安全研究方面具有8年以上经验,包括与嵌入式或固件代码基础进行实践工作。·定义安全政策模型的经验授权方案,RBAC 和行政角色分离,包括如何表达政策,执行和管理在生产中的作用。·熟悉应用加密 (包括安全启动,代码签署和认证),威胁建模,常见攻击向量和缓解技术。·在不断变化的环境中独立合作的能力

查看英文原文

NVIDIA Networking product security team is looking for an outstanding technical security architect with hands-on experience to help us improve the security posture of NVIDIA networking products. In this role you will partner with firmware, hardware, and architecture teams on the security architecture, to reduce risk, threats, and vulnerabilities while driving new security features that affect millions of devices all over the world!

What you'll be doing:

  • Be involved in the security architecture of NVIDIA Networking firmware — trust boundaries, privilege separation between firmware domains, device identity and key storage, secure boot and chain of trust, and secure update and anti-rollback flows.
  • Perform security threat modeling of firmware and embedded subsystems across NVIDIA Networking products.
  • Analyze complex firmware and hardware/firmware interactions to identify security weaknesses, including boot flows, privileged execution environments, and host- and network-facing management interfaces.
  • Define security features and mitigations spanning the full device lifecycle — provisioning, attestation, debug authorization, runtime hardening, and field update. Guide the engineering teams throughout the implementation.
  • Translate threat models into actionable security requirements and architectural decisions, and review designs and implementations against them.
  • Partner with hardware and ASIC architects to specify the security primitives firmware depends on, and define how they are used across the product line.
  • Drive secure development practices for firmware — memory-safe coding patterns in C, static analysis, and fuzzing of firmware-exposed interfaces — and make sure development processes meet security and coding standards.

What we need to see:

  • Academic degree in computer science, electrical engineering, or related field (or equivalent experience).
  • Demonstrated experience of 8+ years in product security, firmware security, or security research, including hands-on work with embedded or firmware codebases.
  • Experience defining security policy models — authorization schemes, RBAC, and administrative role separation — including how policy is expressed, enforced, and administered in production.
  • Familiarity with applied cryptography (including secure boot, code signing, and attestation), threat modeling, common attack vectors, and mitigation techniques.
  • Ability to work independently, and collaboratively in a constantly evolving environment.
  • Excellent communication and interpersonal skills.

Ways to stand out from the crowd:

  • M.Sc. or PhD in computer science, electrical engineering, or related technical field.
  • Experience with hardware/software interfaces in networking devices — register and MMIO programming models, DMA, mailbox and doorbell mechanisms, PCIe configuration and management interfaces, and the firmware that drives them.
  • Experience with hardware roots of trust and hardware-enforced isolation (MPU/MMU, secure enclaves, fuse/OTP-based provisioning) in SoCs or ASICs.
  • Hands-on experience with networking software — device drivers, control plane, management interfaces, or embedded network operating systems — and an understanding of how these components interact with firmware.
  • Familiarity with high-scale deployment, the data center security ecosystem and its operational challenges.

With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you.
Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 184,000 USD - 287,500 USD for Level 4, and 224,000 USD - 356,500 USD for Level 5.You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 23, 2026.This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.Originally posted on Himalayas

本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。 本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。

该公司其他在招职位

加速计算研究实习生

NVIDIASwedenIntern今天
开发工程限定地区(需当地身份)日间重叠约 2 小时,需偶尔早起或晚睡

Senior Data Engineer

NVIDIACanada, United States$168,000 - $270,250/年Full Time今天
开发工程限定地区(需当地身份)

← 返回全部职位