System Software Engineer, Staff (Security)

Qualcomm • San Diego, CA

64d • $134,800 - $202,200

About The Position

Qualcomm Cloud BU is seeking an experienced System Software Engineer (Security) to develop secure computing environments for Edge and Data Center use cases, targeting Qualcomm’s next generation high-performance inference accelerator. This role focuses on expanding the Trusted Execution Environments (TEE) on server platforms and enabling our hardware-assisted inference accelerator as a trusted device. You will design and integrate solutions to protect sensitive workloads in TDISP and SR-IOV-compliant Trusted VMs across multi-tenant deployments.

Requirements

• 3+ years of experience in embedded systems, Linux kernel development, and linux/server security.
• Experience of cryptographic primitives and best practices, including key management and certificates.
• Knowledge of threat modeling, network/cloud security, and Linux container/VM security.
• Designs and manages virtualized environments using platforms like VMware, KVM, Hyper-V.
• Ability on kernel level or hardware-firmware level debugging using tools like JTAG, logic analyzers, and protocol analyzers.
• Strong analytical skills and integration capabilities. A passion for solving challenging, low-level problem.

Nice To Haves

• Experience with cloud infrastructure or server systems engineering, within the security or virtualization domains.
• Expertise in ARM architecture and/or RISC-V architecture.
• Knowledge of PCIe architecture, including DMA, MMIO, mailbox and endpoint configuration.
• Experience with server security technologies such as cryptographic protocols, secure boot, attestation, TPM.
• Experience designing or integrating secure GPU acceleration within enclave-based architectures.

Responsibilities

• Collaborate with hardware, firmware, host software and application teams to deliver end-to-end Confidential Compute solutions.
• Integrate and validate TDISP-compliant trusted device assignment and lifecycle management for secure inference acceleration.
• Integrate and validate SR-IOV-based secure execution environment for PCIe devices, supporting isolation, attestation, and multi-tenant deployments.
• Extend open-source OS/hypervisors (e.g., Linux, QEMU, KVM) to support confidential workload security extensions and validate solutions across various virtualization technologies and TEEs.
• Work with server security technologies such as TPM, secure provisioning, firmware integrity, and platform-level attestation.
• Contribute to threat modeling, risk assessments, and compliance alignment with industry standards TDISP, OCP, TCG, and Confidential Computing Consortium.
• Participate in system bring-up, debugging, and performance tuning across heterogeneous compute environments.

Benefits

• Competitive annual discretionary bonus program.
• Opportunity for annual RSU grants.
• Comprehensive benefits package designed to support success at work, at home, and at play.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees