Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

This role involves participating in product security incident response, conducting security research on Qualcomm products to detect and mitigate vulnerabilities, and communicating with customers regarding security issues. Responsibilities include binary analysis for active exploits, reviewing resolutions, assisting customers with patches, internal vulnerability detection, risk assessment, and evaluating new technologies for vulnerability management. You will also engage with the security research community to foster coordinated vulnerability disclosure.

Responsibilities

Participate in product security incident response.
Conduct security research on Qualcomm products for vulnerability detection and mitigation.
Communicate with customers on product security related issues.
Perform binary analysis to identify vulnerabilities in active exploits.
Review resolutions as part of the incident response process.
Assist customers in adopting security patches.
Conduct internal vulnerability detection and risk assessment using manual methods and automated tools.
Evaluate new technologies and tools for vulnerability detection, triage, and mitigation.
Engage with the security research community and foster coordinated vulnerability disclosure.

Requirements

Bachelor's degree in Engineering, Computer Science, or related field and 6+ years of Security Engineering or related work experience.
Master's degree in Engineering, Computer Science, or related field and 5+ years of Security Engineering or related work experience.
PhD in Engineering, Computer Science, or related field and 4+ years of Security Engineering or related work experience.
At least five years of experience (work or academic) in software security.
Experience performing software security audits.
Ability to work independently with minimal supervision.

Skills

Binary analysis and malware/exploit reverse engineering using tools like Ghidra, IDA or Binary Ninja
Product security incident response in Mobile, IOT or automotive industry
Secure code review, analysis and vulnerability assessment
Security testing, e.g. fuzzing and pen-testing
Operating system security
Mobile platform security such as Linux Android
Embedded security on embedded firmware
Automotive Security
Exploit mitigation techniques
Threat modeling
Experience in product security incident response and working with external security researchers
LLVM experience
Experience in fuzzing (Custom fuzzers/harnesses, custom bug detection LLVM passes or runtime detection) to large code base for vulnerability detection
Knowledge of hypervisors, containers, and secure execution environments
Familiarity in the internals for Linux, Windows, Zephyr and QNX
Familiarity of wireless communication systems and protocols (CDMA/GSM/UMTS/LTE, WLAN, Bluetooth, NFC, etc)
Teamwork across various teams and geolocations
Able to communicate in English, both verbal and written

Experience Level

6+ years of Security Engineering or related work experience (with Bachelor's)
5+ years of Security Engineering or related work experience (with Master's)
4+ years of Security Engineering or related work experience (with PhD)
At least five years of experience (work or academic) in software security

Education Level

Bachelor's degree in Engineering, Computer Science, or related field
Master's degree in Engineering, Computer Science, or related field
PhD in Engineering, Computer Science, or related field

Salary/Compensations

$180,000.00 - $270,000.00

Benefits

Competitive annual discretionary bonus program
Opportunity for annual RSU grants
Highly competitive benefits package designed to support your success at work, at home, and at play

About the Company

Qualcomm Technologies, Inc. is an equal opportunity employer.
Qualcomm is committed to providing an accessible process for individuals with disabilities.
Qualcomm is committed to making our workplace accessible for individuals with disabilities.
Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.

Equal Opportunity

Qualcomm is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or any other protected classification.