Senior SBOM Engineer
$117,800 - $176,600 USD yearly
Originally posted 18 September 2026 by the employer.
This role focuses on open source compliance, Software Bill of Materials (SBOM) governance, and software supply chain assurance.
About the role
As a Senior SBOM Engineer, you will drive open source compliance, Software Bill of Materials (SBOM) governance, and software supply chain assurance across a diverse portfolio of products and technologies. You will work at the intersection of software engineering, open source compliance, automation, and cybersecurity.
What you'll do
- Perform open source and third-party software reviews, including license, dependency, and distribution analysis.
- Generate, analyze, and validate SBOMs using industry-standard formats such as SPDX and CycloneDX.
- Investigate software composition, transitive dependencies, and software supply chain risks.
- Develop automation and tooling to improve compliance, SBOM generation, and review efficiency.
- Integrate compliance controls into development, build, and CI/CD workflows.
- Collaborate with engineering, legal, security, and product teams to resolve findings and support product releases.
What you'll need
- Bachelor's degree in Computer Science, Computer Engineering, or related technical field OR Master’s degree in an equivalent technical field.
- 5 years of software engineering, open source compliance, application security, or DevSecOps experience.
- Strong Linux and software development fundamentals.
- Experience with Git and modern source-control workflows.
- Proficiency in Python and experience with one or more languages such as C/C++, JavaScript, Go, or Rust.
- Experience with build systems and package management ecosystems (Yocto, Gradle, Maven, npm, pip, etc.).
- Knowledge of open source licensing, compliance principles, and software development workflows.
- Experience generating or validating SBOMs and working with software composition analysis tools.
Nice to have
- Experience with SPDX, CycloneDX, VEX, or related software supply chain standards.
- Familiarity with tools such as Black Duck, FossID, ScanCode, ORT, Syft, or Snyk.
- Experience with containers, Kubernetes, and cloud-native environments.
- Knowledge of software supply chain security, vulnerability management, and regulatory requirements related to SBOMs.
- Experience supporting Linux, Android, embedded, or cloud-based products.
Skills: SBOMs, open source compliance, software composition analysis, CI/CD workflows, software supply chain
This role has been open 26 days — well below the 48-day median for Software Engineering Semiconductor roles.
Software Engineering Semiconductor · Systems Software
|
Open roles in category
364
|
Median days open
48 d
|
Median salary
$148k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Qualcomm | All employers we track in this specialty (364 roles · 60 employers) |
|---|---|---|
| Open roles in this specialty | 16 | 364 |
| Open roles in the wider Software, Firmware & Systems family | 715 | 6140 · 145 employers |
| Median days open | 51 d | 48 d (+3 d vs this employer) |
| Median salary (USD postings) | — | $148k |
Skills observed across this category: SBOMs, open source compliance, software composition analysis, CI/CD workflows, software supply chain
Who's hiring in this category
- Keysight Technologies · 39 open roles · median 27 d
- KLA Corporation · 31 open roles · median 118 d
- Cadence Design Systems · 28 open roles · median 204 d
- Micron Technology · 27 open roles · median 41 d
- NVIDIA · 27 open roles · median 45 d
- Applied Materials · 25 open roles · median 36 d
How we counted: 364 open Software Engineering Semiconductor (Systems Software) roles from 60 employers tracked in the SemiconductorJobs index, counted 15 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there — it is counted in the wider Software, Firmware & Systems family row. Figures refresh nightly.