International Association
for Cryptologic Research

A Software Security Engineer is responsible for assisting product development teams throughout the company in detecting and mitigating security vulnerabilities in software design and implementation. Specific responsibilities may include identifying and assessing software vulnerabilities using both manual methods and automated tools, mentoring software developers in adopting secure coding techniques and secure coding standards, assisting product development teams in establishing static analysis and security testing processes, promoting security mindset throughout software development from design to implementation to testing, evaluating new technologies/tools to detect, triage, and mitigate software security defects, identifying and addressing weakness in existing software development life cycle with a goal to improve overall software security.

Skills/Experience:

Applicants should possess at least two years of experience (work or academic) in the field of software security, like performing software security audits. Ability to engage with product teams independently with minimal supervision is a must. Applicants should have expertise in two or more of the following areas:

- Code review, analysis and vulnerability assessment (C, C++, ARM assembly,C#,Java)

- Security testing, e.g. fuzzing, instrumentation, monitoring

- Operating system security

- Mobile platform security

- Mitigation techniques

- Incident response

In-depth knowledge in the following specific areas will be considered a plus:

- Mobile operating system internals (Android, Windows Phone, iOS)

- Static analysis

- Firmware analysis and reverse engineering

- ARM architecture

Education:

Graduate degree in a security related field of Computer Science or Mathematics is a plus.

If interested, please apply directly to requisition G1889943

at www.qualcomm.com/careers