DevOps Engineer – Security Assurance (SCA & SAST Focus)
Confirmed on the employer's own hiring board on Oct 17, 2026. First seen by Alion on Jun 22, 2026. Qualcomm scores B on the Alion truth index.
Company:
Qualcomm Intl Inc., Mexico Branch OfficeJob Area:
Information Technology Group, Information Technology Group > IT EngineeringGeneral Summary:
Role Summary
We are seeking an experiencedDevOps Engineer - Security Assurance tosupport,build, andoperatesecure, scalable CI/CD platforms with deep integration of Application Security (DevSecOps) practices. This roleis responsible forembedding Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools into enterprise CI/CD workflows, ensuring vulnerabilities are detected early and remediated efficiently across cloud andon-premenvironments.
The ideal candidate brings strong hands-on experience with cloud platforms (AWS), GitHub-based CI/CD, andLinux systems, coupled with provenexpertiseintegrating and scaling security tools within developer workflows.
Key Responsibilities
DevSecOps& Security Assurance
Integrate,operate, and scaleSAST and SCA tools within CI/CD pipelines to enable automated vulnerability detection and compliance.
Embedshift-left security practices across build, test, and deployment pipelines.
Partner withSecurity, Compliance, and Engineering teams to define and enforce application security standards.
Automate policy enforcement, vulnerability thresholds, and security gating within CI pipelines.
Analyze and triage security findings, reducing falsepositivesand improving developer adoption.
Support audit, compliance, and security reviews by providing evidence from CI/CD security controls.
Support on-prem server infrastructureofSecurity Assurance Tools and workflows.
Integrate CI/CD pipelines withsource code management systems such as GitHub,Perforce(P4), and related tools.
Troubleshoot complex pipeline, build, infrastructure, and security issues across hybrid cloud andon-premenvironments.
Create andmaintaincleardocumentation, runbooks, and architectural designs.
Required Qualifications
Proven experience integratingSAST and SCA tools into CI/CD pipelines.
Strong experience buildingcloud-based CI/CD pipelines, especially usingGitHub and GitHub Actions.
Strong understanding ofSecurity Assurance tools likeKlocwork,Sonarqube, Linux systems (Debian-based preferred) and CI/CD workflows.
Solid knowledge ofapplication security concepts, including:
Open-source dependency risk
Secure coding practices
Vulnerability management and remediation workflows
Experience supporting large-scale CI orbuildplatforms used by multiple teams.
Strong scripting and automation skills (Bash, Python, or similar).
Excellent communication skills with the ability to work effectively acrossengineering, IT, and security teams.
Preferred / Nice-to-Have Skills
Experience with common SAST tools (e.g.,Klocwork,CodeQL, SonarQube).
Experience with SCA tools (e.g., Black Duck,Snyk,WhiteSource/Mend, OSS Review Toolkit).
Familiarity withhybrid cloud andon -prem architectures.
Experience withartifact repositories, package management, or build caching strategies.
Exposure to container-based CI workloads (Docker, ephemeral runners).
Understanding ofsecurity compliance frameworks and audit requirements.
Experience improvingdeveloper security adoption through automation and usability improvements.
Minimum Qualifications:
• 3+ years of IT-related work experience with a Bachelor's degree.OR
5+ years of IT-related work experience without a Bachelor’s degree.
Applicants: Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail [email protected] or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).
Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.
To all Staffing and Recruiting Agencies:Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.
If you would like more information about this role, please contact Qualcomm Careers.