SBOM & Compliance Engineer - Embedded & Cloud-Edge

ThunderSoft; San Diego (CA); On-site; USD 85,000 - 110,000; Full time

Job summary

A technology company is seeking a Software Engineer with expertise in SBOM standards and software supply chain security. This role will focus on designing and implementing workflows for compliance with the EU Cyber Resilience Act. Candidates should have experience in embedded C/C++ environments and a strong understanding of DevSecOps practices. The position involves collaboration with engineering and security teams to ensure high-quality software delivery. Strong communication skills are essential.

Qualifications

• 2+ years of relevant software engineering experience.
• Strong knowledge of SBOM standards including SPDX and CycloneDX.
• Experience with EU Cyber Resilience Act compliance.

Responsibilities

• Design, develop, and validate embedded and cloud-edge software.
• Generate and maintain SBOMs ensuring compliance with CRA.
• Integrate SBOM generation and compliance checks into CI/CD pipelines.

Skills

SBOM standards and tooling

Embedded C/C++ proficiency

Software supply chain security

DevSecOps methodologies

Communication skills

Education

Bachelor’s degree or above in Engineering, Computer Science, Information Systems or related field

Tools

SPDX

CycloneDX

Syft

Snyk

Black Duck

Job description

A technology company is seeking a Software Engineer with expertise in SBOM standards and software supply chain security. This role will focus on designing and implementing workflows for compliance with the EU Cyber Resilience Act. Candidates should have experience in embedded C/C++ environments and a strong understanding of DevSecOps practices. The position involves collaboration with engineering and security teams to ensure high-quality software delivery. Strong communication skills are essential.