Senior SBOM Engineer
Core
Drive open source compliance, Software Bill of Materials (SBOM) governance, and software supply chain assurance across a diverse portfolio of products and technologies.
Role type
Senior IC SBOM Engineer (Software Supply Chain)
Builds
Automated tooling for SBOM generation, compliance checks, and integration into CI/CD workflows
Domain
Software Engineering / Cybersecurity / Open Source Compliance
Required skills
SBOM generation and validation, open source license analysis, software composition analysis, automation and tooling development, CI/CD integration, dependency management, Linux fundamentals, Python programming, build systems (Yocto, Gradle, Maven, npm, pip)
Preferred skills
SPDX and CycloneDX standards, VEX, software supply chain security, vulnerability management, container and Kubernetes environments, Android and embedded systems
Technologies
SPDX, CycloneDX, VEX, Black Duck, FossID, ScanCode, ORT, Syft, Snyk, Yocto, Gradle, Maven, npm, pip, Kubernetes, Linux, Python, C/C++, Java, Go, Rust, Git
Responsibilities
Perform open source and third-party software reviews including license and dependency analysis; Generate, analyze, and validate SBOMs using industry-standard formats; Investigate software composition, transitive dependencies, and supply chain risks; Develop automation and tooling to improve compliance and review efficiency; Integrate compliance controls into development, build, and CI/CD workflows; Collaborate with engineering, legal, security, and product teams to resolve findings; Create and maintain technical documentation, standards, and developer guidance
Seniority
Senior, hands-on IC
