Product Security Engineer, Senior Staff

Qualcomm; San Diego (CA); On-site; USD 180,000 - 270,000; Full time

Benefits offered by this job

Discretionary bonus program

RSU grants

Benefits package

Job summary

Qualcomm Technologies, Inc. is seeking a security engineering professional to participate in product security incident response and to conduct in-depth research on Qualcomm products to detect and mitigate vulnerabilities.

The role involves binary analysis, vulnerability assessments, and collaboration with customers to adopt security patches, with a focus on proactive risk management across mobile, IoT, and automotive domains.

Qualifications

• Bachelor's degree required with 6+ years of security engineering experience.
• Master's degree with 5+ years of security engineering experience.
• PhD with 4+ years of security engineering experience.

Responsibilities

• Participate in product security incident response.
• Perform security research on Qualcomm products to detect and mitigate vulnerabilities.
• Provide customer communications on product security issues.
• Conduct internal vulnerability detection and risk assessment using manual and automated tools.

Skills

Binary analysis

Security audits

Threat modeling

Fuzzing

OS security

Mobile security

Exploit mitigation

Education

Bachelor's degree in Engineering, Computer Science, or related field

Master's degree in Engineering, Computer Science, or related field

PhD in Engineering, Computer Science, or related field

Tools

Ghidra

IDA

Binary Ninja

LLVM

Job description

Company

Qualcomm Technologies, Inc.

Job Area

Engineering Group > Security Engineering

General Summary

Job function includes participation in product security incident response, security research on Qualcomm products in detecting and mitigating security vulnerabilities, and customer communications on product security related issues. Specific responsibilities may include binary analysis to identify vulnerabilities being used in active exploits; review of resolutions as part of the incident response; assisting customers to adopt security patches; internal vulnerability detection and risk assessment using both manual methods and automated tools; evaluating new technologies/tools to help detect, triage, and mitigate security vulnerabilities; reaching out to the security research community and fostering coordinated vulnerability disclosure.

Minimum Qualifications

• Bachelor's degree in Engineering, Computer Science, or related field and 6+ years of Security Engineering or related work experience.
• Master's degree in Engineering, Computer Science, or related field and 5+ years of Security Engineering or related work experience.
• PhD in Engineering, Computer Science, or related field and 4+ years of Security Engineering or related work experience.

Experience and Skills

Applicants should possess at least five years of experience (work or academic) in the field of software security and, specifically, with experience of performing software security audits. Ability to work independently with minimal supervision is a must. Applicants should have expertise or experience in two or more of the following areas:

• Binary analysis and malware/exploit reverse engineering using tools like Ghidra, IDA or Binary Ninja.
• Product security incident response in Mobile, IOT or automotive industry.
• Secure code review, analysis and vulnerability assessment.
• Security testing, e.g. fuzzing and pen-testing.
• Operating system security.
• Mobile platform security such as Linux Android.
• Embedded security on embedded firmware.
• Automotive Security.
• Exploit mitigation techniques.
• Threat modeling.

Additional Skills

• Experience in product security incident response and working with external security researchers.
• LLVM experience.
• Experience in fuzzing (Custom fuzzers/harnesses, custom bug detection LLVM passes or runtime detection) to large code base for vulnerability detection.
• Knowledge of hypervisors, containers, and secure execution environments.
• Familiarity with internals for Linux, Windows, Zephyr and QNX.
• Familiarity of wireless communication systems and protocols (CDMA/GSM/UMTS/LTE, WLAN, Bluetooth, NFC, etc).

Soft Skills

• Teamwork across various teams and geolocations.
• Able to communicate in English, both verbal and written.

Pay Range and Other Compensation & Benefits

$180,000.00 - $270,000.00

In addition to the base salary, the position offers a competitive annual discretionary bonus program and opportunity for annual RSU grants. A comprehensive benefits package is also available to support success at work, at home, and at play.

EEO Statement

Qualcomm is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or any other protected classification.

Accommodation for Disabilities

If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. Qualcomm will provide reasonable accommodations to support individuals with disabilities to participate in the hiring process.