{"id":47604,"url":"https://alion.io/job/qualcomm-devops-engineer-security-assurance-sca-sast-focus","title":"DevOps Engineer – Security Assurance (SCA & SAST Focus)","company":{"id":94,"name":"Qualcomm","domain":"qualcomm.com","url":"https://alion.io/company/qualcomm","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":72,"open_postings":1182,"ghost_share":0.22,"stale_share":0.121,"repost_share":0.468,"time_to_fill_p50_days":75,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mexico City, Mexico"],"countries":["MX"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":40000,"max_usd":111000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3074},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Debian","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SonarQube","optional":false},{"name":"CodeQL","optional":true},{"name":"Docker","optional":true},{"name":"Mend","optional":true},{"name":"Rest-Assured","optional":true},{"name":"Snyk","optional":true}],"status":"live","first_seen_at":"2026-06-22T00:00:00Z","employer_posted_date":"2026-07-06","last_verified_at":"2026-10-18T00:06:21Z","board_verified":true,"closed_at":null,"days_open":118,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":117},"description":"Company:\nQualcomm Intl Inc., Mexico Branch OfficeJob Area:\nInformation Technology Group, Information Technology Group > IT EngineeringGeneral Summary:\nRole Summary\nWe are seeking an experiencedDevOps Engineer - Security Assurance tosupport,build, andoperatesecure, scalable CI/CD platforms with deep integration of Application Security (DevSecOps) practices. This roleis responsible forembedding Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools into enterprise CI/CD workflows, ensuring vulnerabilities are detected early and remediated efficiently across cloud andon-premenvironments.\nThe ideal candidate brings strong hands-on experience with cloud platforms (AWS), GitHub-based CI/CD, andLinux systems, coupled with provenexpertiseintegrating and scaling security tools within developer workflows.\nKey Responsibilities\nDevSecOps& Security Assurance\nIntegrate,operate, and scaleSAST and SCA tools within CI/CD pipelines to enable automated vulnerability detection and compliance.\n\nEmbedshift-left security practices across build, test, and deployment pipelines.\n\nPartner withSecurity, Compliance, and Engineering teams to define and enforce application security standards.\n\nAutomate policy enforcement, vulnerability thresholds, and security gating within CI pipelines.\n\nAnalyze and triage security findings, reducing falsepositivesand improving developer adoption.\n\nSupport audit, compliance, and security reviews by providing evidence from CI/CD security controls.\n\nSupport on-prem server infrastructureofSecurity Assurance Tools and workflows.\n\nIntegrate CI/CD pipelines withsource code management systems such as GitHub,Perforce(P4), and related tools.\n\nTroubleshoot complex pipeline, build, infrastructure, and security issues across hybrid cloud andon-premenvironments.\n\nCreate andmaintaincleardocumentation, runbooks, and architectural designs.\n\nRequired Qualifications\nProven experience integratingSAST and SCA tools into CI/CD pipelines.\n\nStrong experience buildingcloud-based CI/CD pipelines, especially usingGitHub and GitHub Actions.\n\nStrong understanding ofSecurity Assurance tools likeKlocwork,Sonarqube, Linux systems (Debian-based preferred) and CI/CD workflows.\n\nSolid knowledge ofapplication security concepts, including:\n\nOpen-source dependency risk\n\nSecure coding practices\n\nVulnerability management and remediation workflows\n\nExperience supporting large-scale CI orbuildplatforms used by multiple teams.\n\nStrong scripting and automation skills (Bash, Python, or similar).\n\nExcellent communication skills with the ability to work effectively acrossengineering, IT, and security teams.\n\nPreferred / Nice-to-Have Skills\nExperience with common SAST tools (e.g.,Klocwork,CodeQL, SonarQube).\n\nExperience with SCA tools (e.g., Black Duck,Snyk,WhiteSource/Mend, OSS Review Toolkit).\n\nFamiliarity withhybrid cloud andon -prem architectures.\n\nExperience withartifact repositories, package management, or build caching strategies.\n\nExposure to container-based CI workloads (Docker, ephemeral runners).\n\nUnderstanding ofsecurity compliance frameworks and audit requirements.\n\nExperience improvingdeveloper security adoption through automation and usability improvements.\n\nMinimum Qualifications:\n• 3+ years of IT-related work experience with a Bachelor's degree.OR\n5+ years of IT-related work experience without a Bachelor’s degree.\nApplicants: Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail  or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).\nQualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.\nTo all Staffing and Recruiting Agencies:Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.\nIf you would like more information about this role, please contact Qualcomm Careers.","description_format":"text","description_chars":5176,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Processors, MCUs & AI Chips","RF & Wireless Hardware","Car Electronics"],"lifecycle":[{"event":"open","at":"2026-06-22T00:00:00Z"},{"event":"close","at":"2026-08-09T14:49:34Z"},{"event":"reopen","at":"2026-09-12T22:53:34Z"},{"event":"close","at":"2026-09-13T01:53:42Z"},{"event":"reopen","at":"2026-09-13T05:40:27Z"},{"event":"close","at":"2026-09-13T08:50:22Z"},{"event":"reopen","at":"2026-09-13T17:50:41Z"},{"event":"close","at":"2026-09-13T20:50:48Z"},{"event":"reopen","at":"2026-09-14T09:46:52Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.666,"p_room":0.36,"age_days":117,"expected_fill_days":75,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/qualcomm-devops-engineer-security-assurance-sca-sast-focus","json_url":"https://alion.io/job/qualcomm-devops-engineer-security-assurance-sca-sast-focus.json","meta":{"generated_at":"2026-10-18T01:29:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2448,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":94},"rest":"https://alion.io/mcp/rest/get_company?id=94"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqualcomm-devops-engineer-security-assurance-sca-sast-focus"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqualcomm-devops-engineer-security-assurance-sca-sast-focus"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqualcomm-devops-engineer-security-assurance-sca-sast-focus"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qualcomm-devops-engineer-security-assurance-sca-sast-focus\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqualcomm-devops-engineer-security-assurance-sca-sast-focus"}]}