Summary
✨ AI‑Generated
A remote software supply chain engineering role focused on open source governance and compliance for commercial software. Responsibilities include generating SBOMs, reviewing licenses and dependencies, assessing architectural implications, and integrating compliance checks into CI/CD pipelines.
Highlights
Remote engineering opportunity focused on software supply chain integrity, open source compliance, regulatory requirements, SBOM generation, and early compliance checks within CI/CD pipelines.
Description
We are looking for an experienced Software Supply Chain Engineer to join our InnerSource & Open Source Office (ISOSO).
In this role, you will collaborate with software architects, developers, and cross-functional teams to ensure compliance with open source software usage in our commercial products.
This remote position offers you the opportunity to strengthen our Software Supply Chain Compliance & Integrity team and contribute to regulatory compliance in a dynamic environment.
Your tasks
Collaborating with software architects and senior developers to generate comprehensive Software Bills of Materials (SBOM) for commercial products, detailing open source components and dependenciesReviewing and analyzing the usage of open source software to ensure compliance with relevant regulations and licenses, considering deployment and architecture implicationsIntegrating open source compliance checks into CI/CD pipelines to facilitate early identification of compliance issues and minimize risksManaging dependencies for at least two programming languages, such as .NET/C#, Python, Java, C/C++, or Node.JS/TypeScript, while considering both proprietary and open source componentsCreating and maintaining clear compliance documentation, including policies and best practices, to foster a compliant development environmentUtilizing expertise in CycloneDX to enhance the accuracy and efficiency of compliance processesStaying informed about industry regulations, particularly FDA requirements, to ensure alignment with current and emerging standardsProviding training and support to development teams on open source compliance practices, fostering a culture of awareness and responsibilityDriving upstream contributions to Syft in Golang to enhance its capabilities in artifact analysis and supply chain security
Requirements
Minimum 5 years of experience in software development with a strong focus on open source complianceBachelor's degree in Computer Science, Software Engineering, or a related fieldProven experience with CI/CD pipelines and integrating open source compliance checks into the development processThorough understanding of open source licenses and best practices for complianceDemonstrable experience working with CycloneDX or similar SBOM formatsProficiency in managing dependencies across multiple programming languages such as .NET/C#, Python, Java, C/C++, Node.JS/TypeScriptFamiliarity with both Linux and Windows operating systems and their interactions with open source componentsFluent English and PolishResidence in Poland
Nice to have
Experience in regulated industries such as healthcare or medical devicesKnowledge of container and virtual machine technologiesDeep familiarity with Golang and the Syft codebase is highly desired
Job no.
JOB-J3V3X
Sii ensures that all hiring decisions are made solely on the basis of qualifications and competence.
We are committed to equal and fair treatment of all, regardless of legally protected characteristics.
At Sii, we promote a diverse and inclusive work environment, in full compliance with applicable anti-discrimination laws.
Benefits For You
Great Place to WorkSolid financial situationContracts with the biggest brandsCentre of internal trainingsMany experts you can learn fromOpen and accessible management teamProfit sharingPassion Sponsorship programRegular integration events and tripsComfortable and well-equipped officesMySii appMedical care
