1 day ago
Bengaluru, IndiaStaff+
Responsibilities
- Design, develop, deploy, and support production-grade full-stack applications and engineering platforms for product security and vulnerability management.
- Build backend services, APIs, databases, frontend applications, automation frameworks, dashboards, and enterprise integrations.
- Develop tools for vulnerability data processing, intake, triage, prioritization, remediation tracking, reporting, and workflow automation.
- Build AI-assisted capabilities for data analysis, classification, summarization, recommendations, developer assistance, and workflow automation.
- Apply LLM, generative AI, and agentic approaches to secure enterprise solutions and developer workflows.
- Integrate security tools with ticketing systems, scanners, static analysis platforms, CI/CD pipelines, cloud services, and engineering systems.
- Drive architecture and design decisions, technical direction, engineering standards, testing strategies, observability, and production support.
- Lead technical initiatives, mentor engineers, and coordinate execution across multiple teams.
Requirements
- Bachelor's degree in Engineering, Information Systems, Computer Science, or a related field with 3+ years of software engineering or related experience; alternatively, a master's degree with 2+ years or a PhD with 1+ year.
- 2+ years of academic or work experience with C, C++, Java, Python, or another programming language.
- Strong experience developing, deploying, and supporting full-stack applications and engineering platforms, with strong Python programming experience.
- Experience with backend services, REST APIs, databases, frontend applications, automation frameworks, enterprise integrations, Linux, Git, source code, build systems, and CI/CD pipelines.
- Experience building automation for security, software engineering, data processing, or operational workflows.
- Experience developing or supporting security tools for vulnerability management, security analysis, remediation tracking, or reporting.
- Understanding of vulnerability intake, triage, applicability, exploitability, prioritization, remediation, secure AI application design, and product security workflows.
- Experience applying AI, LLMs, generative AI, or agentic AI to software development, security analysis, automation, or developer workflows.
- Familiarity with static analysis, secure coding, software composition analysis, SBOMs, vulnerability detection, SCA, VEX, CVE data, secure SDLC, and compliance requirements such as CRA.
- Preferred experience with Klocwork, Parasoft, Semgrep, LLM orchestration, RAG, MCP servers, tool-using agents, evaluation frameworks, Docker, Kubernetes, cloud-native development, symbolic execution, fuzzing, and security metadata.
- Ability to independently define technical solutions, deliver projects with minimal guidance, lead technical initiatives, mentor engineers, and drive execution across multiple teams.
Categories
About Qualcomm
Inspired by 250 years of American ingenuity, we build technologies that expand what’s possible. From wireless to AI at scale and 6G, our innovations power progress worldwide.