Lead Engineer - Vulnerability Management & Security Automation

Job Summary

As a leading technology innovator, Qualcomm pushes the boundaries of what's possible to enable next-generation experiences and drives digital transformation to help create a smarter, connected future for all. As a Qualcomm Software Engineer, you will design, develop, create, modify, and validate embedded and cloud edge software, applications, and/or specialized utility programs that launch cutting-edge, world class products that meet and exceed customer needs. Qualcomm Software Engineers collaborate with systems, hardware, architecture, test engineers, and other teams to design system-level software solutions and obtain information on performance requirements and interfaces.

Title: Product Security Engineer - Vulnerability Management Responsibilities

• Strong proven experience managing the end-to-end vulnerability lifecycle, including intake, triage, risk assessment, remediation tracking, and reporting.
• Demonstrated ability to perform risk-based vulnerability prioritization, including applicability and exploitability analysis beyond raw CVSS scoring.
• Solid understanding of secure software development practices and common vulnerability classes (e.g., injection flaws, insecure dependencies, misconfigurations).
• Experience scaling vulnerability management programs through automation, custom tooling, or AI-assisted analysis.
• Hands-on experience with vulnerability scanning tools and remediation tracking workflows (e.g., scanners, ticketing systems, dashboards).
• Experience analyzing vulnerabilities in third-party and open-source software, including CVE review and vendor advisory intake.
• Ability to provide clear, actionable remediation guidance to developers, including recommended fixes and mitigation strategies.
• Proficiency in C and C++.
• Strong analytical and problem-solving skills, with the ability to assess complex technical environments.
• Excellent written and verbal communication skills.
• Ability to operate effectively in fast-paced environments with multiple stakeholders and competing priorities.
• Familiarity with AI advances in this area.

Preferred Qualifications

• Knowledge of regulatory or compliance-driven security requirements impacting software products (e.g., SDLC, CRA).
• Familiarity with software composition analysis (SCA), SBOMs, and vulnerability metadata such as VEX.
• Experience integrating vulnerability management with CI/CD pipelines or engineering workflows.
• Familiarity with external threat intelligence sources, including zero-day disclosures and coordinated vulnerability response.

Education qualifications

• Bachelors degree in computer science, electrical engineering, or a related technical field, or equivalent practical experience.
• 7+ years of hands-on experience in product security, vulnerability management, or other relevant application security roles.

Qualifications

• Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience.
• OR Master's degree in Engineering, Information Systems, Computer Science, or related field and 3+ years of Software Engineering or related work experience.
• OR PhD in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.
• 2+ years of work experience with programming languages such as C, C++, Java, Python, etc.