- 工作方式
- 混合办公
- 类型
- 全职
- 发布
- 2026-08-11
- 截止
- 2026-08-15（已截止）
- 资历
- senior
- 编号
- JR2023153
职责
- 负责实时操作系统、虚拟机管理程序和嵌入式虚拟化技术的安全工程，包括设计、实现、审查和验证。
- 参与 CPU 和 SoC 架构的协作，包括特权级别、内存保护、DMA、中断、启动流程、调试控制和硬件隔离。
- 构建并实施防御功能，例如强分区、最小权限访问、安全通信、故障隔离、安全更新以及从恶意输入中恢复。
- 进行威胁建模和汽车 TARA 分析，并将风险、缓解措施、要求、测试和证据与安全标准联系起来。
- 审查底层 C/C++ 代码，调查漏洞，构建模糊测试和安全测试基础设施，并将修复程序投入生产。
必备要求
- 8 年以上系统、嵌入式、平台、产品或汽车安全方面的实践经验。
- 电子工程/计算机科学学士学位或同等经验。
- 具备保护实时操作系统、虚拟机管理程序、内核、固件、启动程序、驱动程序或其他特权软件的经验。
- 精通 C/C++，尤其注重内存安全、并发性、资源所有权、权限边界和隔离性。
- 熟悉 CPU 和 SoC 安全概念，包括 MMU/SMMU 或 IOMMU、DMA、中断、启动、调试和硬件支持的隔离。
- 具备威胁建模、漏洞分析、可利用性评估、模糊测试、静态或动态分析以及安全修复方面的经验。
- 熟悉汽车网络安全、安全或流程标准，例如 ISO/SAE 21434、UN R155、ISO 26262 接口或 Automotive SPICE。
优先条件
- 推动了 Rust、Ada/SPARK、形式化方法或其他内存安全且可分析的系统方法的采用。
- 为底层系统构建基于能力或所有权的安全模型。
- 构建安全自动化、模糊测试基础设施、审查代理或工程团队使用的 AI 辅助工具。
Responsibilities
- Own security engineering for RTOS, hypervisors, and embedded virtualization technologies, including design, implementation, review, and validation.
- Collaborate on CPU and SoC architecture, including privilege levels, memory protection, DMA, interrupts, boot flow, debug control, and hardware isolation.
- Build and implement defensive features such as strong partitioning, least-privilege access, secure communication, fault isolation, secure updates, and recovery from malicious input.
- Perform threat modeling and automotive TARA analysis, and link risks, mitigations, requirements, tests, and evidence to security standards.
- Review low-level C/C++ code, investigate vulnerabilities, build fuzzing and security testing infrastructure, and drive fixes into production.
Must Have
- 8+ years of hands-on experience in systems, embedded, platform, product, or automotive security.
- BS in Electrical Engineering/Computer Science or equivalent experience.
- Experience securing RTOS, hypervisors, kernels, firmware, bootloaders, drivers, or other privileged software.
- Proficiency in C/C++ with emphasis on memory safety, concurrency, resource ownership, privilege boundaries, and isolation.
- Familiarity with CPU and SoC security concepts, including MMU/SMMU or IOMMU, DMA, interrupts, boot, debug, and hardware-backed isolation.
- Experience with threat modeling, vulnerability analysis, exploitability assessment, fuzzing, static or dynamic analysis, and security fixes.
- Familiarity with automotive cybersecurity, safety, or process standards such as ISO/SAE 21434, UN R155, ISO 26262 interfaces, or Automotive SPICE.
Preferred
- Drove adoption of Rust, Ada/SPARK, formal methods, or other memory-safe and analyzable systems approaches.
- Built capability- or ownership-based security models for low-level systems.
- Built security automation, fuzzing infrastructure, review agents, or AI-assisted tools used by engineering teams.
公司简介
NVIDIA 被广泛认为是科技界最理想的雇主之一。我们拥有全球最具前瞻性思维和勤奋敬业的人才。如果您富有创造力且自主性强，我们期待您的加入！NVIDIA 致力于营造多元化的工作环境，并以成为提供平等机会的雇主而自豪。我们高度重视现有和未来员工的多元化，因此我们不会（包括在招聘和晋升过程中）基于种族、宗教、肤色、国籍、性别、性别表达、性取向、年龄、婚姻状况、退伍军人身份、残疾状况或任何其他受法律保护的特征进行歧视。