System Software Engineer, Staff (Security)

Qualcomm•San Diego, CA

About The Position

Qualcomm Cloud BU is seeking an experienced System Software Engineer (Security) to develop secure computing environments for Edge and Data Center use cases, targeting Qualcomm’s next generation high-performance inference accelerator. This role focuses on expanding the Trusted Execution Environments (TEE) on server platforms and enabling our hardware-assisted inference accelerator as a trusted device. You will design and integrate solutions to protect sensitive workloads in TDISP and SR-IOV-compliant Trusted VMs across multi-tenant deployments. Candidate should have a background in cloud computing or on-prem server security systems, with experience in confidential computing, virtualization, and secure execution environments. Familiarity with platforms such as Intel TDX, AMD SEV-SNP, ARM CCA or AWS Nitro Enclaves is highly desirable.

Requirements

Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience.
OR Master's degree in Engineering, Information Systems, Computer Science, or related field and 3+ years of Software Engineering or related work experience.
OR PhD in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.
2+ years of work experience with Programming Language such as C, C++, Java, Python, etc.
3+ years of experience in embedded systems, Linux kernel development, and linux/server security.
Experience of cryptographic primitives and best practices, including key management and certificates
Knowledge of threat modeling, network/cloud security, and Linux container/VM security.
Designs and manages virtualized environments using platforms like VMware, KVM, Hyper-V.
Ability on kernel level or hardware-firmware level debugging using tools like JTAG, logic analyzers, and protocol analyzers.
Strong analytical skills and integration capabilities. A passion for solving challenging, low-level problem.

Nice To Haves

Experience with cloud infrastructure or server systems engineering, within the security or virtualization domains.
Expertise in ARM architecture and/or RISC-V architecture.
Knowledge of PCIe architecture, including DMA, MMIO, mailbox and endpoint configuration.
Experience with server security technologies such as cryptographic protocols, secure boot, attestation, TPM.
Experience designing or integrating secure GPU acceleration within enclave-based architectures.

Responsibilities

Collaborate with hardware, firmware, host software and application teams to deliver end-to-end Confidential Compute solutions.
Integrate and validate TDISP-compliant trusted device assignment and lifecycle management for secure inference acceleration.
Integrate and validate SR-IOV-based secure execution environment for PCIe devices, supporting isolation, attestation, and multi-tenant deployments.
Extend open-source OS/hypervisors (e.g., Linux, QEMU, KVM) to support confidential workload security extensions and validate solutions across various virtualization technologies and TEEs.
Work with server security technologies such as TPM, secure provisioning, firmware integrity, and platform-level attestation.
Contribute to threat modeling, risk assessments, and compliance alignment with industry standards TDISP, OCP, TCG, and Confidential Computing Consortium.
Participate in system bring-up, debugging, and performance tuning across heterogeneous compute environments.

Benefits

We also offer a competitive annual discretionary bonus program and opportunity for annual RSU grants (employees on sales-incentive plans are not eligible for our annual bonus). In addition, our highly competitive benefits package is designed to support your success at work, at home, and at play.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume