BENGALURU · FULLTIME
Lead Engineer - Vulnerability Management & Security Automation
Qualcomm
Bengaluru · onsite · Posted 28d ago
Sourced from
Undisclosed7–12 yrsfulltimeBengaluru
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.7s
- Found the form on Naukri · 7 questions to answer1.4s
- Decided the answers for all of them2.4s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Job Summary
As a leading technology innovator, Qualcomm pushes the boundaries of what's possible to enable next-generation experiences and drives digital transformation to help create a smarter, connected future for all. As a Qualcomm Software Engineer, you will design, develop, create, modify, and validate embedded and cloud edge software, applications, and/or specialized utility programs that launch cutting-edge, world class products that meet and exceed customer needs. Qualcomm Software Engineers collaborate with systems, hardware, architecture, test engineers, and other teams to design system-level software solutions and obtain information on performance requirements and interfaces.
Title: Product Security Engineer - Vulnerability Management Responsibilities - Strong proven experience managing the end-to-end vulnerability lifecycle, including intake, triage, risk assessment, remediation tracking, and reporting.
- Demonstrated ability to perform risk-based vulnerability prioritization, including applicability and exploitability analysis beyond raw CVSS scoring.
- Solid understanding of secure software development practices and common vulnerability classes (e.g., injection flaws, insecure dependencies, misconfigurations).
- Experience scaling vulnerability management programs through automation, custom tooling, or AI-assisted analysis.
- Hands-on experience with vulnerability scanning tools and remediation tracking workflows (e.g., scanners, ticketing systems, dashboards).
- Experience analyzing vulnerabilities in third-party and open-source software, including CVE review and vendor advisory intake.
- Ability to provide clear, actionable remediation guidance to developers, including recommended fixes and mitigation strategies.
- Proficiency in C and C++.
- Strong analytical and problem-solving skills, with the ability to assess complex technical environments.
- Excellent written and verbal communication skills.
- Ability to operate effectively in fast-paced environments with multiple stakeholders and competing priorities.
- Familiarity with AI advances in this area.
- Knowledge of regulatory or compliance-driven security requirements impacting software products (e.g., SDLC, CRA).
- Familiarity with software composition analysis (SCA), SBOMs, and vulnerability metadata such as VEX.
- Experience integrating vulnerability management with CI/CD pipelines or engineering workflows.
- Familiarity with external threat intelligence sources, including zero-day disclosures and coordinated vulnerability response.
- Bachelors degree in computer science, electrical engineering, or a related technical field, or equivalent practical experience.
- 7+ years of hands-on experience in product security, vulnerability management, or other relevant application security roles.
- Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience.
- OR Master's degree in Engineering, Information Systems, Computer Science, or related field and 3+ years of Software Engineering or related work experience.
- OR PhD in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.
- 2+ years of work experience with programming languages such as C, C++, Java, Python, etc.
Sourced from naukri
Section · 02
Skills
AutomationCI/CD PipelinesIncident ResponsemetadataDesign SystemsEmbedded Systemsproduct securityelectrical engineeringcloudApplication SecurityCommunication SkillsDigital TransformationJavaArchitecturemaintenancecomplianceArtificial Intelligence
Section · Company
About Qualcomm
Qualcomm
Semiconductors
22k+
employees
1996
30 years old
San Diego,California
United States
About
Qualcomm invents breakthrough technologies that transform how the world connects, computes and communicates.
Industries
SemiconductorsHardware & Networking
Employee ratings
1,207 reviews
3.7/ 5
Culture
3.4
Career growth
3.2
Work-life
3.3
Employees rate it well for
Work Life Balance267Salary160Work Culture155Learning100Senior Management91
Find them on