Product Security Engineer – AI Software Development

General

Summary:

As a global technology innovator, Qualcomm pushes the boundaries of what is possible; enabling next-generation experiences and driving digital transformation toward a smarter, more connected future. The AISW organization is Qualcomm's central AI software engineering engine, delivering industry-defining AI SDKs across mobile, automotive, XR, IoT, and cloud platforms. Our culture is built on a growth mindset, a commitment to inspiring excellence, and empowering teams and leaders to bring their best every day;

creating life-changing innovations that impact billions of lives around the world.

AI runtimes, model compilers, and inference SDKs now operate in safety-critical, latency-sensitive, and high-assurance contexts where vulnerabilities can carry real-world consequences at massive scale. This reality demands security researchers who can think across the full stack. From hardware-adjacent firmware and accelerator interfaces to SDK-level APIs and developer-facing tool chains; and who are equipped to drive proactive threat discovery, rigorous vulnerability analysis, and security-by-design principles throughout the software development lifecycle.

Our mission is to ensure that AI software powering the next generation of mobile, automotive, edge, and connected devices remains resilient, trustworthy, and secure against the most determined adversaries by exploring innovative ways to identify and prevent security flaws before they can be discovered, exploited, or weaponized in the real world.

We are seeking talented, self-driven Product Security Engineers; from Junior to Senior level with security expertise to partner with AISW development teams from design to deployment.

In this role, you will evaluate system architectures for security gaps, build automated and continuous security assessments, contribute security fixes alongside developers, and embed security gates into CI/CD pipelines. You will play a founding role in building threat detection systems from the ground up, champion the adoption of new testing tools and detection mechanisms, and leverage LLM-driven workflows and agentic systems to scale security research and raise simulation fidelity.

Responsibilities
:

• Evaluate AISW Team’s products for security gaps early in the development lifecycle, partnering with engineering teams from ideation through release.

• Conduct security design reviews, threat modeling sessions, and architecture assessments to surface attack surfaces and trust-boundary risks.

• Monitor the threat landscape to identify newly disclosed vulnerabilities, adversarial techniques, and emerging attack patterns relevant to AISW products.

• Leverage threat intelligence to inform adversary emulation scenarios, including campaign design, TTP selection aligned with MITRE ATT&CK, and operational sequencing.

• Develop and maintain automated solutions for threat emulation, improving accuracy and efficiency in detection validation.

• Analyze telemetry generated from simulations to assess detection coverage, identify gaps, and recommend improvements.

• Develop and maintain security guidance documentation including policies, procedures, and best practices as a living reference for the AISW organization

• Systematically discover, validate, triage, and track security vulnerabilities from internal teams, automated scanners, and external security researchers.

• Manage the full vulnerability lifecycle; from initial report through rescan validation, applying concepts such as severity scoring (CVSS), KEV prioritization, risk acceptance, ownership assignment, and aging governance.

• Support zero-day escalation events: rapidly iterate through the VM lifecycle, produce custom impact reports, and drive time-sensitive remediation decisions.

• Apply working knowledge of Dev Sec Ops  tooling including SAST, SCA, DAST, container scanning, secrets scanning, and SBOM generation.

• Continuously hunt for exploitable vulnerabilities across applications, infrastructure, developer tool chains, and AI model pipelines.

• Perform comprehensive security assessments across AI…