Qualcomm
Lead/Staff Engineer-Vulnerability management and security Automation, AI
At a Glance
About This Role
Responsibilities
- Develop and maintain threat-detection systems leveraging AI and machine learning
- Build LLM-driven security workflows and agentic systems for vulnerability management
- Implement automated security testing and threat emulation capabilities
- Conduct vulnerability intake, triage, and risk assessment
- Track remediation efforts and manage vulnerability lifecycle
- Generate security reports and maintain ownership assignments
- Implement aging governance policies for vulnerability management
- Validate rescans and manage zero-day escalations
- Conduct security design reviews and threat modeling
- Implement CI/CD security gating and paved-path security solutions
- Work on SAST, SCA, DAST, container scanning, and secrets scanning integration
- Manage SBOM generation and security supply chain analysis
- Perform secure code review and penetration testing
- Collaborate across Mobile, Compute, Automotive, and IoT product teams
Requirements
- Strong expertise in vulnerability management and security automation
- Proficiency in Python and C/C++ programming languages
- Experience with LLM and AI-driven security solutions
- Knowledge of SAST, SCA, DAST, container scanning tools
- Familiarity with threat modeling and secure design practices
- Experience with security testing and penetration testing
- Understanding of binary analysis tools (Ghidra, IDA, Binary Ninja)
- Experience with SBOM generation and supply chain security
- Strong problem-solving and analytical capabilities
- Ability to work across cross-functional teams
- Knowledge of risk-based vulnerability prioritization
- Experience with CI/CD security implementation
- Understanding of vulnerability lifecycle management
- Excellent communication and documentation skills
Benefits & Perks
About Qualcomm
Qualcomm Incorporated is a prominent American multinational corporation based in San Diego, California. Founded in 1985, the company specializes in the design and development of semiconductors, software, and services related to wireless technology. Qualcomm is known for its pioneering work in code-division multiple access (CDMA) technology, which has become a foundational standard for mobile networks, including 2G, 3G, 4G, and 5G. The company offers a range of products and services, including advanced semiconductor chips, particularly its Snapdragon processors used in mobile devices. Qualcomm also holds a vast portfolio of wireless technology patents, which it licenses to device manufacturers and network operators worldwide. Additionally, Qualcomm develops software solutions for mobile communications and invests significantly in research and development to drive innovation in areas such as 5G technology and Internet of Things (IoT) applications. Its diverse customer base includes mobile device manufacturers, telecommunications operators, and the automotive industry, among others.
Security at Qualcomm
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“We take security vulnerabilities very seriously and implement information security management systems”
Security Team
Overseen by Vice President of Cybersecurity, with hundreds of people dedicated to privacy and data security
Key Initiatives
Operates a Vulnerability Rewards Program through HackerOne and conducts ongoing vulnerability analysis
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on LinkedIn