Senior SBOM Engineer

Qualcomm; San Diego (CA); On-site; USD 118,000 - 177,000; Full time

Benefits offered by this job

Annual bonus

RSU grants

Comprehensive benefits

Job summary

Qualcomm Technologies, Inc. seeks a Senior SBOM Engineer to drive open source compliance, SBOM governance, and software supply chain assurance across its diverse products.

You will analyze complex software systems and generate SBOMs using SPDX and CycloneDX, partnering with engineering, legal, security, and product teams to ensure compliant releases. You will also develop automation to scale compliance efforts and embed SBOM generation into automated engineering workflows, supporting audits and

Qualifications

• Bachelor's degree with 2+ years of software engineering or related experience.
• Master's degree with 1+ year of software engineering or related experience.
• PhD in Engineering, Information Systems, Computer Science, or related field.
• 2+ years of programming in languages such as C/C++, Java, Python, etc.

Responsibilities

• Perform open source and third‑party software reviews, including license, dependency, and distribution analysis.
• Generate, analyze, and validate SBOMs using SPDX and CycloneDX formats.
• Investigate software composition, transitive dependencies, and supply chain risks.
• Develop automation and tooling to improve compliance and SBOM generation.
• Integrate compliance controls into development, build, and CI/CD workflows.
• Collaborate with engineering, legal, security, and product teams to resolve findings.
• Support customer, regulatory, and audit requests related to OSS and SBOM disclosures.
• Create and maintain technical documentation and developer guidance.
• Independently lead complex reviews and drive process improvements.

Skills

Linux fundamentals

Python

C/C++

Git & source control

Analytical thinking

Education

Bachelor's degree in Engineering, Information Systems, Computer Science, or related field

Master's degree in Engineering, Information Systems, Computer Science, or related field

PhD in Engineering, Information Systems, Computer Science, or related field

Tools

SPDX

CycloneDX

Black Duck

FossID

ScanCode

ORT

Snyk

Job description

Company

Qualcomm Technologies, Inc.

Job Area

Engineering Group, Engineering Group > Software Engineering

General Summary

Qualcomm’s Open Source Engineering team works with internal and external stakeholders to develop, maintain, and enhance the engineering processes, tools, and systems necessary to support the organization’s open source, third‑party software, and software supply‑chain objectives. As a Senior SBOM Engineer, you will help drive open source compliance, Software Bill of Materials (SBOM) governance, and software supply chain assurance across a diverse portfolio of products and technologies. In this role, you will work at the intersection of software engineering, open source compliance, automation, and cybersecurity. You will analyze complex software systems, identify and assess open source and third‑party components, generate and validate SBOMs, and partner with engineering, legal, security, and product teams to ensure compliant and secure software releases. The role also includes developing automation and tooling that scales compliance activities and integrates them into engineering workflows.

Minimum Qualifications

• Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.
• Master's degree in Engineering, Information Systems, Computer Science, or related field and 1+ year of Software Engineering or related work experience.
• PhD in Engineering, Information Systems, Computer Science, or related field.
• 2+ years of academic or work experience with Programming Language such as C, C++, Java, Python, etc.

Key Responsibilities

• Perform open source and third‑party software reviews, including license, dependency, and distribution analysis.
• Generate, analyze, and validate SBOMs using industry‑standard formats such as SPDX and CycloneDX.
• Investigate software composition, transitive dependencies, and software supply chain risks.
• Develop automation and tooling to improve compliance, SBOM generation, and review efficiency.
• Integrate compliance controls into development, build, and CI/CD workflows.
• Collaborate with engineering, legal, security, and product teams to resolve findings and support product releases.
• Support customer, regulatory, and audit requests related to open source software and SBOM disclosures.
• Create and maintain technical documentation, standards, and developer guidance.
• Independently lead complex reviews and contribute to process improvements and operational excellence.

Required Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or related technical field OR Master’s degree in an equivalent technical field.
• 5+ years of software engineering, open source compliance, application security, DevSecOps, or related experience.
• Strong Linux and software development fundamentals.
• Experience with Git and modern source‑control workflows.
• Proficiency in Python and experience with one or more languages such as C/C++, JavaScript, Go, or Rust.
• Experience with build systems and package management ecosystems (Yocto, Gradle, Maven, npm, pip, etc.).
• Knowledge of open source licensing, compliance principles, and software development workflows.
• Experience generating or validating SBOMs and working with software composition analysis tools.
• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Experience with SPDX, CycloneDX, VEX, or related software supply chain standards.
• Familiarity with tools such as Black Duck, FossID, ScanCode, ORT, Syft, or Snyk.
• Experience with containers, Kubernetes, and cloud‑native environments.
• Knowledge of software supply chain security, vulnerability management, and regulatory requirements related to SBOMs.
• Experience supporting Linux, Android, embedded, or cloud‑based products.

Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e‑mail disability‑[e-mail] or call Qualcomm's toll‑free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities.

EEO Employer: Qualcomm is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or any other protected classification.

Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.

Pay range and Other Compensation & Benefits

$117,800.00 - $176,600.00 The above pay scale reflects the broad, minimum to maximum, pay scale for this job code for the location for which it has been posted. Even more importantly, please note that salary is only one component of total compensation at Qualcomm. We also offer a competitive annual discretionary bonus program and opportunity for annual RSU grants (employees on sales‑incentive plans are not eligible for our annual bonus). In addition, our highly competitive benefits package is designed to support your success at work, at home, and at play.

If you would like more information about this role, please contact Qualcomm Careers.