Senior SBOM & Software Supply Chain Engineer

Qualcomm; San Diego (CA); On-site; USD 118,000 - 177,000; Full time

Benefits offered by this job

Annual bonus

RSU grants

Comprehensive benefits

Job summary

Qualcomm Technologies, Inc. seeks a Senior SBOM Engineer to drive open source compliance, SBOM governance, and software supply chain assurance across its diverse products.

You will analyze complex software systems and generate SBOMs using SPDX and CycloneDX, partnering with engineering, legal, security, and product teams to ensure compliant releases. You will also develop automation to scale compliance efforts and embed SBOM generation into automated engineering workflows, supporting audits and

Qualifications

• Bachelor's degree with 2+ years of software engineering or related experience.
• Master's degree with 1+ year of software engineering or related experience.
• PhD in Engineering, Information Systems, Computer Science, or related field.
• 2+ years of programming in languages such as C/C++, Java, Python, etc.

Responsibilities

• Perform open source and third‑party software reviews, including license, dependency, and distribution analysis.
• Generate, analyze, and validate SBOMs using SPDX and CycloneDX formats.
• Investigate software composition, transitive dependencies, and supply chain risks.
• Develop automation and tooling to improve compliance and SBOM generation.
• Integrate compliance controls into development, build, and CI/CD workflows.
• Collaborate with engineering, legal, security, and product teams to resolve findings.
• Support customer, regulatory, and audit requests related to OSS and SBOM disclosures.
• Create and maintain technical documentation and developer guidance.
• Independently lead complex reviews and drive process improvements.

Skills

Linux fundamentals

Python

C/C++

Git & source control

Analytical thinking

Education

Bachelor's degree in Engineering, Information Systems, Computer Science, or related field

Master's degree in Engineering, Information Systems, Computer Science, or related field

PhD in Engineering, Information Systems, Computer Science, or related field

Tools

SPDX

CycloneDX

Black Duck

FossID

ScanCode

ORT

Snyk

Job description

Qualcomm Technologies, Inc. seeks a Senior SBOM Engineer to drive open source compliance, SBOM governance, and software supply chain assurance across its diverse products.

You will analyze complex software systems and generate SBOMs using SPDX and CycloneDX, partnering with engineering, legal, security, and product teams to ensure compliant releases. You will also develop automation to scale compliance efforts and embed SBOM generation into automated engineering workflows, supporting audits and