Senior Security Certification Engineer - Qualcomm - Guyancourt - France

A world leader in smart mobile technologies, QCT offers complete solutions that enable continuous innovation for today's smart connected devices. Our vast expertise in wireless technology, combined with our unique systems approach to developing solutions, puts QCT at the forefront of the rapidly expanding mobile industry. QCT offers solutions for CDMA, UMTS, GSM and LTE technologies, providing support for both 3G, 4G and now 5G networks and devices. Qualcomm also offers a broad portfolio of additional wired and wireless technologies for the mobile, networking, computing and consumer electronics product segments. All of our solutions and products are elegantly engineered for optimal performance and power consumption. Our system-on-chip solutions like Snapdragon bring together CPU, GPU, connectivity, security, multimedia and GPS technologies in a way that is redefining mobile possibilities for people everywhere. Because of its unsurpassed performance and capabilities, Snapdragon is enhancing the mobile experience and fueling an ever-expanding array of new connected device categories, ranging from smartphones to tablets to e-readers and beyond. 

As a Senior Security Certification Engineer, you will join the team responsible for the security certifications and evaluations of Qualcomm chipsets. In this senior role, you will drive and coordinate certification efforts across multiple industry standards (including  Common Criteria, EUCC, SESIP, etc.), ensuring our products meet global security requirements. Working at a system level spanning hardware, software, and infrastructure, you will serve as a subject-matter expert interfacing with internal engineering teams (hardware/software design, product security) as well as Qualcomm’s security lab, accredited third-party evaluation labs, and government evaluation authorities to successfully plan and complete security evaluations of Qualcomm products. 

This role exposes you to all aspects of hardware and software security design, including architecture, cryptographic and secure IP development, security countermeasures, security lifecycle management, and formal certification requirements. You will leverage your deep expertise to lead documentation and evaluation processes, contribute to security architecture reviews, and guide cross-functional teams in implementing best practices. By ensuring Qualcomm chipsets achieve key certifications (from Common Criteria, Globalplatform, GSMA, and FIPS validations to new compliance frameworks under the EU Cyber Resilience Act (CRA)), you will play a critical part in enabling trusted, industry-leading security solutions. 

We are open on the location for this role for the right individual

Minimum Qualifications: 

• Bachelor’s degree in Engineering, Computer Science, Information Systems, or related field  

• 7+ years of experience in embedded product’s security, cryptography and security certification (e.g. Secure Processor or secure element, Cryptographic libraries, hardware cryptography and embedded security software…) in the context of Common Criteria (CC), FIPS, SESIP or banking standards such as EMVCo, MasterCard, VISA, etc. 

Preferred Qualifications: 

• Master’s degree in the above fields and 7+ years of relevant experience. 

• Extensive expertise in security certification standards: Proven hands-on experience with both FIPS 140-2/140-3 and/or Common Criteria evaluation processes,  

• leading the preparation of required documentation (Security Targets, Security Policies) and managing engagements with evaluation labs and certification bodies. 

• Track record of successful Common Criteria certifications, especially at higher assurance levels (e.g., EAL4+ / EAL5+) – experience with smart card / eUICC protection profiles or similar secure element evaluations is highly desired. 

• Broad certification portfolio knowledge: Familiarity with other security certification schemes and standards such as MDFPP, FIDO and IEC62443 or ISO 21434 , etc. Experience adapting to new frameworks is a strong plus. 

• Regulatory awareness: Knowledge of emerging global cybersecurity regulations and schemes (e.g., CRA and the EUCC framework) and how they impact product security certification strategy. 

• Familiarity with cryptographic algorithms (SHA, AES, DES, ECC, RSA), their implementation methods and use models within high level protocols, is expected. 

• Experience in secure systems engineering (4+ years or more) –for example, working on secure SoC/ASIC projects, integrating hardware and software IP from architecture specification through to silicon qualification – demonstrating understanding of complex SoC design and verification processes. 

• Experience with security management, site security audits, or deploying secure development processes in engineering and manufacturing environments is a plus.  

• Design experience and background in low power, high volume applications are a plus 

This senior role is ideal for a seasoned security certification professional who can take ownership of certification projects, provide technical leadership, and ensure Qualcomm’s products achieve and maintain the highest security assurances in a rapidly evolving global landscape