Cyber Security Policy Engineer

NVIDIA is seeking a Cybersecurity Analyst with deep expertise in incident response, forensics investigation, threat hunting, and proactive cyber defense. This role is ideal for a cybersecurity professional passionate about defending enterprise and product environments against advanced threats, and eager to tackle complex investigations across diverse platforms. As part of our Cyber Defense & Response team, you will lead efforts to detect, analyze, and respond to sophisticated attacks targeting NVIDIA’s corporate, cloud, and product ecosystems. This is an opportunity to make a significant impact in the industry, collaborating with elite experts in security, data science, and AI to shape the future of product security technologies. Lead Incident Response efforts for corporate, cloud, and product environments, including investigation, containment, eradication, and recovery. Perform threat hunting across endpoints, networks, and cloud workloads to proactively identify indicators of compromise, emerging threats, and control gaps. Conduct cloud incident response for AWS, Azure, and GCP, and other cloud environments including Kubernetes and containerized workloads, performing log analysis, identity compromise investigations, and workload forensics. Perform digital forensics and malware analysis to support investigations and root cause analysis. Develop and optimize security orchestration and automation playbooks in partnership with Security Engineering to accelerate detection and response. Build and refine detections and defense strategies based on threat models and attacker behaviors across cloud, identity, endpoint, and product telemetry, using frameworks such as MITRE ATT&CK to map adversary tactics and enhance detection coverage. Provide guidance to engineering and business teams on secure design and incident handling standards and contribute to security policies, standards, and metrics to continuously improve NVIDIA’s security posture. Bachelor’s degree in Computer Science or related field, or equivalent experience.

• 8+ years of hands-on experience in incident response and threat hunting, including cloud environments.
• Strong knowledge of cloud security principles, identity and access management, and workload protection.
• Experience with product security investigations, vulnerability analysis, and secure coding practices.
• Proficiency in forensic analysis, intrusion detection, and threat intelligence.
• Advanced knowledge of network analysis, OS internals (Windows/Linux/macOS), and web application security, including the ability to detect abnormal behaviors and assess exploit paths.
• Certifications such as GCIH, GCFA, AWS/Azure Security Specialty, CISSP.

Experience with cloud-native security tools (e.g., AWS GuardDuty, Azure Sentinel, GCP Security Command Center). Development experience in Python, Go, or similar for building security automation. Hands-on experience with container security (Docker, Kubernetes), CI/CD pipeline , and AI security. Advanced knowledge of digital forensics and malware reverse engineering. If you're creative and autonomous, we want to hear from you! You will also be eligible for equity and benefits. Applications for this job will be accepted at least until October 31, 2026. NVIDIA uses AI tools in its recruiting processes. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.