Automotive Platform Software Verification Engineer, Security

NVIDIA NVIDIA · Semiconductors · Bangalore, India

NVIDIA is seeking a Security Verification Engineer for their Automotive Platform solutions team. The role involves embedding security technologies into the Autonomous Driving Software Stack, focusing on security verification, threat control, and cybersecurity validation in a Multi-OS environment. Responsibilities include crafting security test frameworks, analyzing security requirements and threat models, collaborating with component teams, building security validation reports, and improving security software integration testing methods. The role requires strong programming skills in C/C++, experience with embedded software security, and understanding of OS security fundamentals.

What you'd actually do

  1. Crafting and building security test frameworks for various software elements such as secure boot software, camera and imaging software, cryptographic libraries, and more.
  2. Following automotive safety and security processes, analyzing security requirements and threat models to identify hardware and software integration vulnerabilities for system-level security test cases.
  3. Collaborating with various component teams to support customers, enable security issue reproduction, provide secure reference implementations, build security validation reports, and contribute to security solutions, ensuring software resilience.
  4. Building innovative ways to improve and expand security software integration testing methods, aligning with functional, performance, safety, and cybersecurity needs including penetration testing and vulnerability assessments.
  5. Assisting with security automation, security dashboards, threat trackers, and crafting effective and measurable security reports.

Skills

Required

  • Bachelor's or higher degree in electrical/electronics/computer science engineering
  • More than 5 years of experience in embedded software concentrating on security frameworks development or cybersecurity testing
  • Practical experience with scripting languages
  • security code instrumentation
  • static code analysis
  • security test/automation frameworks
  • Strong programming skills in C or C++ in an embedded OS environment
  • Detailed understanding of OS security fundamentals
  • secure application space development
  • secure multi-processor/threading models
  • secure client-server architectures
  • Ability to collaborate with multiple development teams
  • Practical knowledge of security frameworks
  • secure boot chains
  • authentication mechanisms
  • cryptographic implementations
  • security middleware on Linux, QNX, or other real-time operating systems
  • Familiarity with security frameworks (DAC-MAC, SELinux, encryption protocols, PKI)
  • security compliance tools
  • Capacity to work in a fast-paced and dynamic environment

Nice to have

  • Working knowledge in the automotive security domain
  • security verification processes
  • automotive security & safety standards (ISO21434, ASPICE, ISO26262, MISRA-C, CERT-C, etc.)
  • Experience with security testing methodologies including threat modeling
  • penetration testing
  • fuzzing
  • vulnerability assessment
  • security certification processes
  • Hands-on experience with advanced security tools
  • Excellent analytical skills
  • written and verbal communication skills
  • ambitious demeanor

What the JD emphasized

  • security frameworks development
  • cybersecurity testing
  • security code instrumentation
  • security test/automation frameworks
  • security-first approach
  • OS security fundamentals
  • secure application space development
  • secure multi-processor/threading models
  • secure client-server architectures
  • security frameworks
  • secure boot chains
  • authentication mechanisms
  • cryptographic implementations
  • security middleware
  • security frameworks (DAC-MAC, SELinux, encryption protocols, PKI)
  • security compliance tools
  • automotive security domain
  • security verification processes
  • automotive security & safety standards (ISO21434, ASPICE, ISO26262, MISRA-C, CERT-C, etc.)
  • security testing methodologies
  • threat modeling
  • penetration testing
  • fuzzing
  • vulnerability assessment
  • security certification processes