About Modular At Modular, a Qualcomm company , we’re on a mission to revolutionize AI infrastructure by systematically rebuilding the AI software stack from the ground up. Our team, made up of industry leaders and experts, is building cutting-edge, modular infrastructure that simplifies AI development and deployment. By rethinking the complexities of AI systems, we’re empowering everyone to unlock AI’s full potential and tackle some of the world’s most pressing challenges. If you’re passionate about shaping the future of AI and creating tools that make a real difference in people’s lives, we want you on our team. You can read about our culture and careers to understand how we work and what we value.
About the role:
LOCATION:
Candidates based in the US or Canada / United States / US, Canada or Europe / San Francisco Bay Area are welcome to apply. You can work in our office in Los Altos, CA or remotely from home. Onboarding for new hires is conducted in-person in our Los Altos, CA office.
What you will do:
Build and run secure development training, including a role-based curriculum for our engineering teams. Support SOC 2 2027 readiness and the audit: maintain controls and documentation, collect evidence, and work with auditors. Run security reviews of vendors, software acquisitions, and integrations, and respond to customer security questionnaires. Build and tune detections and alerts in our SIEM, investigate noisy or actionable alerts, and bring new log sources online. Strengthen cloud security across AWS, GCP, and Azure. Triage and prioritize Wiz findings and work with owning teams to drive remediation. Share the security on-call rotation: investigate incidents, coordinate containment and remediation across teams, and write post-incident reviews. Take part in quarterly user access reviews and in fleet-wide responses to newly disclosed vulnerabilities. Partner with Platform, SDLC, and IT engineers so that security, identity, and endpoint systems share controls rather than duplicating them.
What you bring to the table:
4+ years of experience in security engineering, application security, or software or infrastructure engineering with a security focus. Experience securing cloud workloads and assessing security risks in AWS, GCP, or Azure. Experience working with security detections and alerts, including investigating and tuning them. Familiarity with SOC 2 or a similar framework (ISO 27001, NIST), including producing audit evidence. Experience with incident response, threat modeling, and risk assessment in fast-moving engineering environments. Ability to communicate secure development practices to engineers and explain security risks to technical and non-technical audiences. Proficiency in at least one of Go, Python, Rust, or C++, and in a scripting language such as Bash. Strong written and verbal communication. You document what you build and can explain a security issue clearly to technical and non-technical audiences. A pragmatic, engineering-driven approach: you make the secure path the easy path, and you automate a problem rather than repeating a manual fix. Strongly identifies with our core company cultural values.
Minimum Qualifications:
Bachelor's degree in Engineering, Information Systems, Computer Engineering, Electrical Engineering, Computer Science, or related field and 4+ years of Software Engineering or related work experience. OR Master's degree in Engineering, Information Systems, Computer Engineering, Electrical Engineering, Computer Science, or related field and 3+ years of Software Engineering or related work experience. OR PhD in Engineering, Information Systems, Computer Engineering, Electrical Engineering, Computer Science, or related field and 2+ years of Software Engineering or related work experience. AND 2+ years of work experience with Programming Language such as Python, Mojo, Rust, C++, etc.
Helpful but not required:
Experience with Wiz, Google SecOps, CrowdStrike, or Veracode. Experience developing and delivering secure development training. Experience running a vendor or third-party risk management process or responding to customer security reviews. Experience with SAST, SCA, or DAST tooling, software supply chain security, or CI/CD security. Experience in a large monorepo or with Bazel builds. Experience with security integration during a merger or acquisition. Interest in applying AI and LLM tooling to security workflows.
What Modular brings to the table:
Amazing Team. We are a progressive and agile team with some of the industry’s best engineering and product leaders. World-class Benefits. In order to attract the best, we need to offer the best. Your benefits package may include comprehensive healthcare coverage, retirement and savings programs, employee stock purchase opportunities, paid time off, wellbeing resources, family support programs, and learning and development opportunities. Please note that specific benefit packages may vary based on your location, you can read more about benefits offered by Qualcomm here . Competitive Compensation. We offer very strong compensation packages, including RSU grants. We want people to be focused on their best work and believe in tailoring compensation plans to meet the needs of our workforce. Team Building Events. We organize regular team onsites and local meetups in Los Altos, CA as well as different cities. Traveling 2-4 times a year is expected for all roles. Working at Modular will enable you to grow quickly as you work alongside incredibly motivated and talented people who have high standards, possess a growth mindset, and a purpose to truly change the world.
The estimated base salary range for this role to be performed in the US, regardless of the state, is
$180,000 - $270,000 USD
. The estimated base salary range for this role to be performed in Canada, regardless of the province, is
$172,400 - $258,600 CAD
. The salary for the successful applicant will depend on a variety of permissible, non-discriminatory job-related factors, which include but are not limited to education, training, work experience, business needs, or market demands. This range may be modified in the future. The total compensation for a candidate will also include annual target bonus, equity, and benefits. For candidates who fall outside of the listed requirements, we nevertheless encourage you to apply as we may have upcoming openings that are lower/higher level than the ones advertised.