02 sep
|
Qualcomm
|
Ciudad de México
02 sep
Qualcomm
Ciudad de México
Company:Qualcomm Intl Inc., Mexico Branch Office
Job Area:Information Technology Group, Information Technology Group > IT Engineering
General Summary:
Role Summary
We are seeking an experienced DevOps Engineer - Security Assuranceto support, build, and operate secure, scalable CI/CD platforms with deep integration of Application Security (DevSecOps)practices. This role is responsible for embedding Static Application Security Testing (SAST)and Software Composition Analysis (SCA)tools into enterprise CI/CD workflows, ensuring vulnerabilities are detected early and remediated efficiently across cloud and on ‑ prem environments.
Key Responsibilities
DevSecOps& Security Assurance
- Integrate, operate, and scale SAST and SCA toolswithin CI/CD pipelines to enable automated vulnerability detection and compliance.
- Embed shift-left securitypractices across build, test, and deployment pipelines.- Automate policy enforcement, vulnerability thresholds, and security gating within CI pipelines.
- Analyze and triage security findings, reducing false positives and improving developer adoption.
- Support audit, compliance, and security reviews by providing evidence from CI/CD security controls.
- Support on-prem server infrastructure of Security Assurance Tools and workflows.
- Integrate CI/CD pipelines with source code management systemssuch as GitHub,Perforce(P4), and related tools.
- Troubleshoot complex pipeline, build, infrastructure, and security issues across hybrid cloud and on ‑ prem environments.
- Create and maintain clear documentation, runbooks, and architectural designs.
Required Qualifications
- Proven experience integrating SAST and SCA toolsinto CI/CD pipelines.
- Strong experience building cloud-based CI/CD pipelines, especially using GitHub and GitHub Actions.
- Strong understanding of Security Assurance tools like Klocwork, Sonarqube, Linux systems(Debian-based preferred) and CI/CD workflows.- Open-source dependency risk
- Secure coding practices
- Vulnera
📌 DevOps Engineer (Ciudad de México)
🏢 Qualcomm
📍 Ciudad de México