# Enterprise Vulnerability Management Analyst

**Company**: NVIDIA
**Experience**: senior
**Job type**: full-time
**Salary**: 160,000 USD - 258,750 USD
**Category**: IT
**Industry**: Technology

**Apply**: https://nvidia.wd5.myworkdayjobs.com/en-US/NVIDIAExternalCareerSite/job/US-CA-Remote/Senior-Vulnerability-Management-Analyst_JR2028388?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_68e975cf-d7a

## Description

NVIDIA's Enterprise Vulnerability Management (VM) Team is looking for an Analyst to help elevate their program to the next level. The analyst's main focus will be vulnerability management/remediation across NVIDIA's enterprise infrastructure and products.

The ideal candidate will improve NVIDIA's internal/external security response procedures, prioritize both public and internal vulnerability remediation, and collaborate with engineering and IT teams to handle the end-to-end resolution of issues.

**Responsibilities:**

- Craft and implement VM processes and program improvements to elevate NVIDIA's vulnerability handling capabilities.

- Handle the receipt, resolution, and disclosure of security vulnerabilities across NVIDIA product lines.

- Engage directly with virtual security teams, engineering partners, and internal support teams to drive issues to long-term resolution.

- Communicate status of VM involvement at all levels of management, both internal and external.

- Draft publications for the security vulnerability disclosures as well as lower-severity security-impacting defects.

- Champion continuous improvement efforts related to security activities across NVIDIA.

- Engage with the broader industry security community and stay at the forefront of industry security trends and requirements.

**Requirements:**

- Ability to quickly scale knowledge while being mentored by leaders.

- Ability to understand technical issues at a high level on a wide range of topics.

- Leadership skills to step up and identify resolutions that are best for NVIDIA and its customers.

- Effective written and verbal communication regardless of audience or issue complexity.

- Ability to work cross-functionally and remotely with other teams to accomplish sophisticated goals.

- Experience with some of the following standards or processes: CVSS, CWE, SDLC, SBOM, VEX, CSAF, threat modeling.

- Knowledge of industry practices for responsible disclosure of security threats and product vulnerabilities.

- Experience in a previous vulnerability management, security development lifecycle (SDL), or bug bounty management role.

- Requires BS/BA degree or equivalent experience and 6+ years of experience in a security-related role.

**Nice to Have:**

- Experience vulnerability management of AI systems and infrastructure.

- Ability to utilize AI systems to enhance or up-level workflows.

- Proven experience driving customer-facing issues effectively and efficiently.

- Understanding of software release processes, e.g., Agile, Unit Testing, etc.

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 160,000 USD - 258,750 USD. You will also be eligible for equity and benefits.

## Skills

### Required
- Vulnerability Management
- Security Development Lifecycle
- Threat Modeling
- CVSS
- CWE
- SDLC
- SBOM
- VEX
- CSAF

### Nice to have
- AI Systems
- Agile
- Unit Testing
- Customer-Facing Issues

---

Source: [Apply at nvidia.wd5.myworkdayjobs.com](https://nvidia.wd5.myworkdayjobs.com/en-US/NVIDIAExternalCareerSite/job/US-CA-Remote/Senior-Vulnerability-Management-Analyst_JR2028388?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)