The Job

Product Security Engineer

Teknik, data och digitalt · Mjukvaru- och webbutveckling · Mjukvaruutveckling · Cybersäkerhet

Gå med för uppdateringar

I korthet

Qualcomm China is looking for a Product Security Engineer in Shanghai. This role involves product security incident response, security research, and mitigating security vulnerabilities. The ideal candidate has at least two years of experience in software security, including audits, with expertise in areas like binary analysis, exploit reverse engineering, secure code review, and mobile platform security.

Ansvarsområden

  • Perform binary analysis to identify vulnerabilities used in active exploits.
  • Review resolutions as part of incident response.
  • Assist customers in adopting security patches.
  • Conduct internal vulnerability detection and risk assessment using manual and automated tools.
  • Evaluate new technologies and tools for detecting, triaging, and mitigating security vulnerabilities.
  • Establish and maintain relationships with the local (China) security research community.
  • Foster coordinated vulnerability disclosure.

Krav

  • At least two years of experience (work or academic) in software security.
  • Experience performing software security audits.
  • Ability to work independently with minimal supervision.
  • Expertise or experience in two or more of the following areas: Binary analysis and malware/exploit reverse engineering, Product security incident response, Secure code review, analysis and vulnerability assessment, Security testing (fuzzing, pen-testing), Operating system security, Mobile platform security (e.g., Android), Exploit mitigation techniques, Threat modeling.
  • 3+ years of work experience with Programming Language such as C, C++, Java, Python, etc.
  • Able to communicate in English, both verbal and written.

Önskade kvalifikationer

  • Graduate degree in a security-related field of Computer Science, Electrical Engineering or Mathematics is a plus.
  • Experience of working with security researchers.
  • Incident response in the mobile industry.
  • Experience applying software static or dynamic analysis tools (e.g., Klocwork, Coverity, LLVM sanitizers, popular fuzzing tools) for vulnerability detection.
  • Knowledge of the internals of mobile or embedded operating systems.
  • Knowledge of wireless communication systems and protocols (CDMA/GSM/UMTS/LTE, WLAN, Bluetooth, NFC, etc.).
  • Mobile device development experience including software, hardware and system.
  • Knowledge of secure protocols/standards (e.g., SSL/TLS, PKI, PKCS).

Förmåner

  • Qualcomm is an equal opportunity employer.
  • Qualcomm is committed to providing an accessible process for individuals with disabilities during the application/hiring process.
  • Qualcomm is committed to making our workplace accessible for individuals with disabilities.
  • Qualcomm expects its employees to abide by all applicable policies and procedures.
#Security#Product Security#Software Engineering#Vulnerability#Incident Response#Reverse Engineering#Penetration Testing#Threat Modeling#Mobile Security#Android
Qualcomm Logo

Företag

Qualcomm

Publicerade jobb

för 2 veckor sedan

Anställningstyp

Heltid

Arbetsform

På plats

Erfarenhetsnivå

Senior

Platser

Shanghai, China

Kvalifikation

Kandidatexamen, Masterexamen, Doktorand

Sökande

Ansök tidigt