Senior Firmware Security Architect, Networking
作为 NVIDIA 网络产品安全团队,我们正在寻找一位拥有实践经验的杰出技术安全架构师来帮助我们改善 NVIDIA 网页产品的安全姿势。在这个角色中,你将与固件,硬件和建筑团队合作在安全架构上,同时减少风险,威胁和漏洞,同时驱动全球数百万设备影响的新安全功能!你会做什么:· 参与 NVIDIA 网络固件的安全架构,信任界限,固件域之间的特权分离,设备身份和关键存储,安全启动和信任链以及安全更新和反滚动流程。· 在 NVIDIA 网页产品中执行固件和嵌入式子系统的安全威胁建模。·分析复杂的固件和硬件/固件互动以确定安全弱点,包括启动流程,特权执行环境以及主机和网络面向管理接口。· 定义整个设备生命周期的安全功能和减轻措施提供,认证,调试授权,运行时间硬化和现场更新。在整个实施过程中指导工程团队。· 将威胁模型转换为可操作的安全要求和架构决策,并审查设计和实现。· 与硬件和 ASIC 建筑师合作,以指定安全原始化的固件依赖,并确定它们在产品线上如何使用。· 推动固件安全开发实践 C 中存储安全编码模式,静态分析和对固件暴露的界面模糊并确保开发过程符合安全和编码标准。我们需要看到的是:·计算机科学,电气工程或相关领域学术学位 (或相等经验). · 在产品安全,固件安全或安全研究方面具有8年以上经验,包括与嵌入式或固件代码基础进行实践工作。·定义安全政策模型的经验授权方案,RBAC 和行政角色分离,包括如何表达政策,执行和管理在生产中的作用。·熟悉应用加密 (包括安全启动,代码签署和认证),威胁建模,常见攻击向量和缓解技术。·在不断变化的环境中独立合作的能力
查看英文原文
NVIDIA Networking product security team is looking for an outstanding technical security architect with hands-on experience to help us improve the security posture of NVIDIA networking products. In this role you will partner with firmware, hardware, and architecture teams on the security architecture, to reduce risk, threats, and vulnerabilities while driving new security features that affect millions of devices all over the world!
What you'll be doing:
- Be involved in the security architecture of NVIDIA Networking firmware — trust boundaries, privilege separation between firmware domains, device identity and key storage, secure boot and chain of trust, and secure update and anti-rollback flows.
- Perform security threat modeling of firmware and embedded subsystems across NVIDIA Networking products.
- Analyze complex firmware and hardware/firmware interactions to identify security weaknesses, including boot flows, privileged execution environments, and host- and network-facing management interfaces.
- Define security features and mitigations spanning the full device lifecycle — provisioning, attestation, debug authorization, runtime hardening, and field update. Guide the engineering teams throughout the implementation.
- Translate threat models into actionable security requirements and architectural decisions, and review designs and implementations against them.
- Partner with hardware and ASIC architects to specify the security primitives firmware depends on, and define how they are used across the product line.
- Drive secure development practices for firmware — memory-safe coding patterns in C, static analysis, and fuzzing of firmware-exposed interfaces — and make sure development processes meet security and coding standards.
What we need to see:
- Academic degree in computer science, electrical engineering, or related field (or equivalent experience).
- Demonstrated experience of 8+ years in product security, firmware security, or security research, including hands-on work with embedded or firmware codebases.
- Experience defining security policy models — authorization schemes, RBAC, and administrative role separation — including how policy is expressed, enforced, and administered in production.
- Familiarity with applied cryptography (including secure boot, code signing, and attestation), threat modeling, common attack vectors, and mitigation techniques.
- Ability to work independently, and collaboratively in a constantly evolving environment.
- Excellent communication and interpersonal skills.
Ways to stand out from the crowd:
- M.Sc. or PhD in computer science, electrical engineering, or related technical field.
- Experience with hardware/software interfaces in networking devices — register and MMIO programming models, DMA, mailbox and doorbell mechanisms, PCIe configuration and management interfaces, and the firmware that drives them.
- Experience with hardware roots of trust and hardware-enforced isolation (MPU/MMU, secure enclaves, fuse/OTP-based provisioning) in SoCs or ASICs.
- Hands-on experience with networking software — device drivers, control plane, management interfaces, or embedded network operating systems — and an understanding of how these components interact with firmware.
- Familiarity with high-scale deployment, the data center security ecosystem and its operational challenges.
With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you.
Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 184,000 USD - 287,500 USD for Level 4, and 224,000 USD - 356,500 USD for Level 5.You will also be eligible for equity and benefits.
Applications for this job will be accepted at least until October 23, 2026.This posting is for an existing vacancy.
NVIDIA uses AI tools in its recruiting processes.
NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.Originally posted on Himalayas