Senior DevOps Engineer - Security Assurance & SAST/SCA

Qualcomm; Ciudad de México; Presencial; MXN 600.000 - 900.000; Jornada completa

Descripción de la vacante

Qualcomm Intl Inc., Mexico Branch Office is seeking an experienced DevOps Engineer – Security Assurance to build and operate secure, scalable CI/CD platforms with integrated AppSec practices. This role focuses on embedding SAST and SCA into enterprise pipelines to detect and remediate vulnerabilities across cloud and on‑prem environments.

The ideal candidate has hands‑on AWS cloud experience, GitHub‑based CI/CD, and strong Linux knowledge, with proven capabilities integrating and scaling

Formación

• 3+ years IT-related work experience with a Bachelor's degree.
• 5+ years IT experience without a Bachelor's degree.
• Experience integrating SAST and SCA into CI/CD pipelines.
• Strong knowledge of GitHub-based CI/CD and Linux systems.

Responsabilidades

• Integrate, operate, and scale SAST and SCA tools within CI/CD pipelines.
• Embed shift-left security practices across build, test, and deployment pipelines.
• Partner with Security, Compliance, and Engineering teams to define and enforce application security standards.
• Automate policy enforcement, vulnerability thresholds, and security gating within CI pipelines.
• Analyze and triage security findings, reducing false positives and improving developer adoption.

Conocimientos

SAST tools

SCA tools

GitHub Actions

AWS

Linux Debian

Automation

Bash scripting

Python

Security principles

Educación

Bachelor's degree in IT/CS

5+ years IT experience without a Bachelor's degree

Herramientas

GitHub

Perforce

Klocwork

SonarQube

OSS Review Toolkit

Snyk

WhiteSource

Descripción del empleo

Qualcomm Intl Inc., Mexico Branch Office is seeking an experienced DevOps Engineer – Security Assurance to build and operate secure, scalable CI/CD platforms with integrated AppSec practices. This role focuses on embedding SAST and SCA into enterprise pipelines to detect and remediate vulnerabilities across cloud and on‑prem environments.

The ideal candidate has hands‑on AWS cloud experience, GitHub‑based CI/CD, and strong Linux knowledge, with proven capabilities integrating and scaling