Required Skills
- Deep knowledge of SPDX and CycloneDX formats
- Experience with SBOM generation tools (e.g., Syft, SPDX tools, CycloneDX CLI)
- Ability to validate SBOMs against CRA requirements (machine‑readable, complete metadata)
- Demonstrated experience applying EU Cyber Resilience Act compliance requirements with embedded C/C++ environments, including expertise in build systems, toolchains, and secure software development practices
- Cybersecurity & compliance
- Software supply chain security expertise (provenance, component analysis, vulnerability scanning with SCA tools such as Snyk, Black Duck)
- Ability to integrate SBOM workflows into CI/CD pipelines for continuous compliance
- Integration & automation experience
- DevOps/DevSecOps practices and automation frameworks for SBOM generation and distribution
- Effective communication with cross‑functional teams
Required Education
Bachelor’s Degree in Engineering, Information Systems, Computer Science or related field and 2+ years of Software Engineering or related work experience OR Master’s Degree in the same fields and 1+ year of experience OR PhD in a related field
Required Years of Experience
Dependent upon Education Requirement
Principal Duties and Responsibilities
- Applies software knowledge and experience to design, develop, create, modify, and validate embedded and cloud edge software, applications, and/or specialized utility programs.
- Analyzes user needs and software requirements to design and customize software for optimal operational efficiency.
- Designs and implements software modules for products and systems.
- Participates in the design, coding for large features, unit testing, significant debugging fixes, and integration efforts to ensure projects are completed to specifications and schedules.
- Performs code reviews and regression tests as well as triages and fixes issues to ensure the quality of code.
- Collaborates with others inside project team to accomplish project objectives.
- Writes technical documentation for software projects.
Level of Responsibility
- Works under supervision.
- Decision‑making may affect work beyond immediate work group.
- Requires verbal and written communication skills to convey information; may require basic negotiation, influence, and tact.
- Tasks do not have defined steps; planning, problem‑solving, and prioritization must occur to complete the tasks effectively.