Staff Cyber Security Engineer (Cyber Defense Center)

Company: Qualcomm Intl Inc., Mexico Branch Office Job Area: Information Technology Group, Information Technology Group > Cyber Security Engineering General Summary: The Information Security and Risk Management (ISRM) organization is looking for a motivated and detail-oriented team player with extensive experience analyzing security events to join our team. As a Staff Cyber Defense Center Engineer, you will be responsible for securing Qualcomm’s systems through continuous monitoring of security events for potential threats. You will use state-of-the-art tools and techniques to investigate alerts and follow procedures to determine the root cause and appropriate response to protect Qualcomm’s IT assets. This role requires excellent critical thinking skills, a strong technical understating of cybersecurity, and the capacity to make decisions in a fast-paced environment. We are a collaborative team that is always learning, sharing, and researching. You will work with engineers and business stakeholders across the company to secure complex infrastructure and applications. You will need communication, analytical, and interpersonal skills, and the ability to learn and grow in a rapidly evolving environment. We welcome candidates who are passionate about cybersecurity and eager to learn and grow as engineers on our Cyber Defense Center team. At Qualcomm, we are committed to fostering a culture of innovation. We value collaboration, creativity, and the power of diverging viewpoints. A significant part of our success as a company comes from our ability to collaborate effectively, analyze complex problems, identify potential solutions, and ultimately converge on a winning strategy. This collective buy-in fosters incredible teamwork and drives our achievements. Join us and be part of a team dedicated to pushing the boundaries of technology and making a positive impact on the world. We are looking for motivated people who have experience in the listed areas, but even more importantly a strong desire to learn and grow. We are committed to provide training opportunities to acclimate new employees to how Qualcomm’s Cyber Defense Center team operates, and skills needed to be successful. This role will be responsible for supporting 24x7 operations thus requires working during daytime hours on weekend and holidays on a rotational basis to support the business requirements of the organization. Principal Duties and Responsibilities: There are many exciting aspects, opportunities, and challenges you will face as a member of the team. You’ll play a key role in expanding our automations of investigation triage and response and offer insights into potential mitigations to threats. You’ll be challenged to tie together information from multiple information sources to determine the scope of security events to thoroughly remediate any potential compromises. Primary duties of this role will be analyzing and responding all security events from multiple including social engineering attempts, malware infections, DDoS, data exfiltration, ransomware, web application attacks, and other security incidents. You will perform thorough analysis of detected security events, leveraging industry knowledge and threat context to determine if an event is malicious and identify the most appropriate resolution. This will require documenting findings and escalating issues to other teams when appropriate and communicating sound recommendations on mitigation and prevention techniques to stakeholders. You will contribute to continual improvement of CDC operations by identifying patterns in threats and opportunities to improve detection logic and response procedures. Develop and optimize alert response playbooks, AI prompts, and standard operating procedures (SOPs), ensuring they are up-to-date and effective. This role will regularly mentor more junior analysts by providing guidance and oversight and being a point of escalation to handle more complex events requiring in-depth analysis. You will be responsible for fostering a culture of continuous learning and professional growth. Preferred Qualifications: Qualcomm values people from all walks of life and backgrounds. We understand not everyone will meet all the qualifications below on day one. That's okay! If you’re passionate about technology and want to grow your skills, if you cover even some of these preferences - we encourage you to apply. • 7+ years of cybersecurity-relevant work experience with a Bachelor's degree in Engineering, Information Systems, Computer Science, or related field. • Hands-on experience working in SIEM or SOAR tools, preferably during prior SOC or CDC operations experience. • In-depth knowledge of security technologies and tools such as EDR, firewalls, CASB, and web proxies, and Cloud Security Posture Management tools. • Knowledge of current cybersecurity threats and relevant frameworks such as MITRE ATT&CK. • Disk, Memory and Network forensics and static and dynamic malware analysis experience. • Detailed understanding of networking, operating systems, identity and access management, and security-relevant internet protocols. • Prior automation of tasks using programming and scripting languages such as C, C++, Java, Python, Go, PowerShell, Bash. etc. • Cybersecurity-relevant certifications such as CEH, Security+, OSCP, GIAC certifications, and CISSP. • Adept at written and verbal communication, especially documentation and summarization. • Strong interpersonal skills and a good team player for our collaborative group. • Excellent analytical and problem-solving abilities, with keen attention to detail. • Must be able to work in a high-stress, fast-paced environment, maintaining focus and efficiency. We are looking for motivated people who have experience in the listed areas, but even more importantly a strong desire to learn and grow. We are committed to provide training opportunities to acclimate new employees to how Qualcomm’s Cyber Defense Center team operates, and skills needed to be successful. Principal Duties and Responsibilities: There are many exciting aspects, opportunities, and challenges you will face as a member of the team. You’ll play a key role in expanding our automations of investigation triage and response and offer insights into potential mitigations to threats. You’ll be challenged to tie together information from multiple information sources to determine the scope of security events to thoroughly remediate any potential compromises. Primary duties of this role will be analyzing and responding all security events from multiple including social engineering attempts, malware infections, DDoS, data exfiltration, ransomware, web application attacks, and other security incidents. You will perform thorough analysis of detected security events, leveraging industry knowledge and threat context to determine if an event is malicious and identify the most appropriate resolution. This will require documenting findings and escalating issues to other teams when appropriate and communicating sound recommendations on mitigation and prevention techniques to stakeholders. You will contribute to continual improvement of CDC operations by identifying patterns in threats and opportunities to improve detection logic and response procedures. Develop and optimize alert response playbooks, AI prompts, and standard operating procedures (SOPs), ensuring they are up-to-date and effective. This role will regularly mentor more junior analysts by providing guidance and oversight and being a point of escalation to handle more complex events requiring in-depth analysis. You will be responsible for fostering a culture of continuous learning and professional growth. Minimum Qualifications: • Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 4+ years of cybersecurity-relevant work experience. OR High school diploma or equivalent and 5+ years of cybersecurity-relevant work experience. Applicants: Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail disability-accomodations@qualcomm.com or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries). Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law. To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications. If you would like more information about this role, please contact Qualcomm Careers.