Lead/Staff Engineer-Vulnerability management and security Automation, AI

Responsibilities

• Own the end-to-end vulnerability lifecycle, including intake, triage, risk assessment, remediation tracking, and reporting
• Perform risk-based prioritization using applicability and exploitability analysis beyond raw CVSS scoring
• Manage the intake and triage of vulnerabilities across internal and third-party software components
• Scale vulnerability management programs through automation, custom tooling, and AI-assisted analysis
• Collaborate with development, infrastructure, and incident response teams to drive timely remediation and prevent future vulnerabilities
• Provide actionable remediation guidance, including recommended fixes and secure implementation patterns, to developers
• Monitor external threat intelligence, CVE disclosures, and vendor advisories to coordinate response actions

Requirements

• Bachelor's degree in Engineering, Computer Science, or a related technical field
• 2+ years of professional experience with programming languages such as C, C++, Java, or Python
• Proven experience managing the end-to-end vulnerability lifecycle
• Strong understanding of secure software development practices and common vulnerability classes
• Experience with vulnerability scanning tools and remediation tracking workflows
• Strong analytical, problem-solving, and communication skills

Preferred Qualifications

• 7+ years of hands-on experience in product security or application security roles
• Knowledge of regulatory or compliance-driven security requirements (e.g., SDLC, CRA)
• Familiarity with Software Composition Analysis (SCA), SBOMs, and vulnerability metadata like VEX
• Experience integrating vulnerability management with CI/CD pipelines or engineering workflows
• Familiarity with AI advances in the security domain

About the Company

Qualcomm is a leading technology innovator that pushes the boundaries of what's possible to enable next-generation experiences and drive digital transformation for a smarter, connected future.