Company:

QT Technologies Ireland Limited

Job Area:

Engineering Group, Engineering Group > Security Engineering

General Summary:

As a Product Security Engineer focused on vulnerability detection research and automation, you will play a critical role in securing software systems by designing and operating scalable vulnerability detection tools for both the source code and binary levels. This role is ideal for someone who is passionate about software security, has a deep understanding of programming languages internals, and is experienced and interested in the deployment of automation systems for the detection of software vulnerabilities.

Your focus will be both on (1) analyzing C/C++ source code using static analysis techniques, both manual and automated, to detect memory safety issues, logic errors, and insecure coding patterns, and on (2) building and maintaining automated vulnerability detection operations.

This is a hands-on, both engineering and DevOps focused role, that blends collaborative security research with tool deployment and operation.

*Please note this role will require 5 days per week onsite in our Cork office*

Minimum Qualifications:

• Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.
OR
Master's degree in Engineering, Information Systems, Computer Science, or related field and 1+ year of Software Engineering or related work experience.
OR
PhD in Engineering, Information Systems, Computer Science, or related field.

• 2+ years of academic or work experience with Programming Language such as C, C++, Java, Python, etc.

Additional Qualifications:

Strong proficiency in C and C++, with deep understanding of memory management and low-level programming.
Proficiency with static analysis tools (e.g., CodeQL, Klocwork, Coverity, Helix QAC, Parasoft, Clang Static Analyzer).
Strong understanding of common vulnerability classes (e.g., buffer overflows, UAF, race conditions).
Hands-on experience with fuzzing frameworks (e.g., AFL++, libFuzzer, Honggfuzz).
DevOps experience, and interest in engaging in DevOps activities, in the area of automated vulnerability detection.
Excellent written communication skills.

Preferred Qualifications:

Experience with ARM architecture, including reverse engineering and binary analysis.
Familiarity with exploit mitigation techniques and their implementation in modern toolchains and operating systems.
Familiarity with AI advances in this area.

Where you will be working

Cork has a proud reputation as Ireland's second largest economic engine and is now one of the Top 20 location choices in Europe with 39,000 people being employed by over 170 overseas companies.
There's a growing diversity in the region with people from many nationalities relocating to Cork, relishing the opportunity to work and live in a location that offers an excellent quality of life.
A gateway to Europe, Cork airport provides access to almost 50 international destinations including transatlantic air routes.

What's on Offer

Apart from working in an open, relaxed and collaborative space, you will enjoy:

Salary, stock and performance related bonus
Maternity/Paternity Leave
Employee stock purchase scheme
Matching pension scheme
Education Assistance
Relocation and immigration support (if needed)
Life, Medical, Income and Travel Insurance
Subsidised memberships for physical and mental well-being
Bicycle purchase scheme
Employee run clubs, including, running, football, chess, badminton + many more

To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.

*References to a particular number of years experience are for indicative purposes only. Applications from candidates with equivalent experience will be considered, provided that the candidate can demonstrate an ability to fulfill the principal duties of the role and possesses the required competencies.

Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail disability-accomodations@qualcomm.com or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).

Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.

To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.

If you would like more information about this role, please contact Qualcomm Careers.

Vulnerability Detection Research and Automation Engineer

Benefits

Job Description