Senior Cyber Security Engineer - Vulnerability Operation

NVIDIA is a leading technology company known for its innovation and excellence. They are seeking a Senior Cyber Security Engineer to enhance their Vulnerability Operations engineering capability with a focus on data-driven security and AI-assisted workflows. The role involves building scalable solutions and embedding security practices into the software development lifecycle while driving proactive risk reduction across the enterprise.

Responsibilities:

• Design, improve, and operate scalable vulnerability management workflows across ingestion, triage, prioritization, remediation, and reporting
• Engineer integrations across vulnerability scanners, endpoint tools, cloud platforms, asset inventory, ticketing systems, and remediation workflows
• Build automation to reduce manual effort, improve consistency, and accelerate vulnerability response across engineering teams
• Partner with application, infrastructure, cloud, and platform teams to clarify remediation requirements and drive issues to closure
• Support risk-based vulnerability prioritization using asset context, exploitability, threat intelligence, and business impact
• Embed vulnerability management practices into engineering and CI/CD workflows where appropriate
• Track remediation progress, identify blockers, and communicate outstanding risk to technical and leadership audiences
• Contribute to process improvements, standards, and operational playbooks for enterprise vulnerability operations

Requirements:

• 12+ years of experience in vulnerability management, security engineering, AppSec, DevSecOps, PSIRT, or a related technical field
• Bachelor's degree in computer science, information technology, cybersecurity, or equivalent experience
• Strong understanding of vulnerability management lifecycle, enterprise risk management, CVSS, exploitability, and remediation practices
• Hands-on experience with vulnerability and security tools such as Tenable, Qualys, Tanium, CrowdStrike, or similar platforms
• Experience integrating security tools and workflows using APIs, scripting, automation, or orchestration
• Experience working with cloud environments such as AWS or Azure
• Familiarity with security frameworks and compliance standards such as ISO 27001, NIST, PCI, or SOX
• Strong communication and collaboration skills, with the ability to drive progress across teams without direct authority
• Ability to operate independently, handle ambiguity, and prioritize work in a fast-moving enterprise environment
• Experience leading enterprise-wide vulnerability remediation campaigns
• Background in application security, cloud security, secure architecture, or infrastructure security
• Experience integrating vulnerability management into developer workflows or CI/CD pipelines
• Familiarity with threat intelligence and exploit prediction approaches
• Experience using automation or AI-assisted workflows to improve triage, ticket enrichment, remediation guidance, or operational efficiency