FOSS Compliance Engineer — SBOM & SCA Automation

Brightwater Recruitment; Cork; On-site; EUR 75,000 - 95,000; Full time

Job summary

Brightwater Recruitment is seeking an experienced FOSS Compliance Engineer to help ensure that software products comply with open-source licensing requirements, industry standards and best practices. This hands-on role combines open-source compliance, Software Composition Analysis (SCA), SBOM management and automation.

You will work with software engineering, security, legal and product teams to embed compliance into the software development lifecycle and to automate SBOM generation and

Qualifications

• 4–8 years' experience in FOSS/open source compliance or licensing.
• Hands-on FOSS analysis, reporting and publishing experience.
• Practical experience with SCA tools such as FossID/Black Duck.
• Understanding of SBOM standards (SPDX/CycloneDX).
• Familiarity with OpenChain and compliance frameworks.
• Experience automating processes into CI/CD pipelines.
• Strong Python development or scripting skills.
• Ability to read software in C/C++, Java, Python or Go.
• Knowledge of open-source licensing models and business impact.
• Experience with Linux environments and tooling.

Responsibilities

• Perform FOSS compliance analysis across software products and services.
• Identify and assess open-source licences and implications for distribution.
• Maintain inventories of software components, licences and attributions.
• Ensure traceability across source code, libraries, binaries and images.
• Operate and integrate SCA tooling into development workflows.
• Automate compliance processes using Python for scanning and SBOM generation.
• Publish, validate and version SBOMs as part of releases.
• Carry out open-source risk assessments for licensing and security.
• Recommend remediation approaches like component replacement or config changes.
• Support engineering teams with dependency management and attribution.
• Provide guidance on FOSS compliance to development teams.
• Monitor open-source licensing developments and regulatory practices.
• Contribute to policy/process/tooling improvements for compliance.
• Support audits, governance and pre-release compliance reviews.
• Assist with customer and partner disclosures when required.

Skills

SBOM Management

Software Composition Analysis

CI/CD Automation

Python

C/C++

FossID

Black Duck

OpenChain

SPDX

CycloneDX

Education

Bachelor's degree in Computer Science/Engineering or related field

Master's degree in Computer Science/Engineering or related discipline

Tools

FossID

Black Duck

Job description

Brightwater Recruitment is seeking an experienced FOSS Compliance Engineer to help ensure that software products comply with open-source licensing requirements, industry standards and best practices. This hands-on role combines open-source compliance, Software Composition Analysis (SCA), SBOM management and automation.

You will work with software engineering, security, legal and product teams to embed compliance into the software development lifecycle and to automate SBOM generation and