SBOM Engineer, Senior - Cork, Ireland
Qualcomm
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Benefits offered by this job
Job summary
QT Technologies Ireland Limited is hiring a Senior SBOM Engineer to drive open source compliance and SBOM governance across diverse products. You will analyze software systems, assess open source components, generate SBOMs, and partner with engineering, legal, security, and product teams to ensure compliant releases.
You will develop automation to scale compliance, integrate SBOM work into development workflows, and support customer and audit requests.
Qualifications
- Minimum 5+ years in software engineering, open source compliance, or DevSecOps.
- Strong Linux and software development fundamentals.
- Experience with open source licensing and compliance.
- Experience generating or validating SBOMs.
Responsibilities
- Perform open source and third-party reviews, license analysis.
- Generate and validate SBOMs using SPDX and CycloneDX.
- Investigate dependencies and supply chain risks.
- Develop automation to improve compliance and SBOM processes.
- Integrate controls into CI/CD workflows.
- Collaborate with cross-functional teams to address findings.
- Support audits and regulatory requests for SBOM disclosures.
- Create technical docs and developer guidance.
Skills
Education
Tools
Job description
QT Technologies Ireland Limited
Engineering Group, Engineering Group > Software Engineering
Qualcomm’s Open Source Engineering team works with internal and external stakeholders to develop, maintain, and enhance the engineering processes, tools, and systems necessary to support the organization’s open source, third-party software, and software supply‑chain objectives.
As a Senior SBOM Engineer, you will help drive open source compliance, Software Bill of Materials (SBOM) governance, and software supply chain assurance across a diverse portfolio of products and technologies.
In this role, you will work at the intersection of software engineering, open source compliance, automation, and cybersecurity. You will analyze complex software systems, identify and assess open source and third‑party components, generate and validate SBOMs, and partner with engineering, legal, security, and product teams to ensure compliant and secure software releases. The role also includes developing automation and tooling that scales compliance activities and integrates them into engineering workflows.
- Perform open source and third‑party software reviews, including license, dependency, and distribution analysis.
- Generate, analyze, and validate SBOMs using industry‑standard formats such as SPDX and CycloneDX.
- Investigate software composition, transitive dependencies, and software supply chain risks.
- Develop automation and tooling to improve compliance, SBOM generation, and review efficiency.
- Integrate compliance controls into development, build, and CI/CD workflows.
- Collaborate with engineering, legal, security, and product teams to resolve findings and support product releases.
- Support customer, regulatory, and audit requests related to open source software and SBOM disclosures.
- Create and maintain technical documentation, standards, and developer guidance.
- Independently lead complex reviews and contribute to process improvements and operational excellence.
- Bachelor's degree in Computer Science, Computer Engineering, or related technical field OR Master’s degree in an equivalent technical field.
- 5+ years of software engineering, open source compliance, application security, DevSecOps, or related experience.
- Strong Linux and software development fundamentals.
- Experience with Git and modern source‑control workflows.
- Proficiency in Python and experience with one or more languages such as C/C++, JavaScript, Go, or Rust.
- Experience with build systems and package management ecosystems (Yocto, Gradle, Maven, npm, pip, etc.).
- Knowledge of open source licensing, compliance principles, and software development workflows.
- Experience generating or validating SBOMs and working with software composition analysis tools.
- Strong analytical, troubleshooting, documentation, and communication skills.
- Experience with SPDX, CycloneDX, VEX, or related software supply chain standards.
- Familiarity with tools such as Black Duck, FossID, ScanCode, ORT, Syft, or Snyk.
- Experience with containers, Kubernetes, and cloud‑native environments.
- Knowledge of software supply chain security, vulnerability management, and regulatory requirements related to SBOMs.
- Experience supporting Linux, Android, embedded, or cloud‑based products.
Cork has a proud reputation as Ireland's second largest economic engine and is now one of the Top 20 location choices in Europe with 39,000 people being employed by over 170 overseas companies. There's a growing diversity in the region with people from many nationalities relocating to Cork, relishing the opportunity to work and live in a location that offers an excellent quality of life. A gateway to Europe, Cork airport provides access to almost 50 international destinations including transatlantic air routes.
We are an Equal Opportunity employer; all qualified applicants will receive consideration for employment without regard to race, colour, religion, sexual orientation, gender identity, national origin, disability, veteran status, or any protected classification.
- Salary, stock and performance related bonus
- Maternity/Paternity Leave
- Employee stock purchase scheme
- Matching pension scheme
- Education Assistance
- Relocation and immigration support (if needed)
- Life, Medical, Income and Travel Insurance
- Subsidised memberships for physical and mental well‑being
- Bicycle purchase scheme
- Employee run clubs, including, running, football, chess, badminton + many more
- Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.
- Master's degree in Engineering, Information Systems, Computer Science, or related field and 1+ year of Software Engineering or related work experience.
- PhD in Engineering, Information Systems, Computer Science, or related field.
- 2+ years of academic or work experience with Programming Language such as C, C++, Java, Python, etc.
*References to a particular number of years experience are for indicative purposes only. Applications from candidates with equivalent experience will be considered, provided that the candidate can demonstrate an ability to fulfill the principal duties of the role and possesses the required competencies.
Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail disability‑accomodations@qualcomm.com or call Qualcomm's toll‑free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).
Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.
To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
