Software Supply Chain Engineer (f/m/x)

Sii Polska is a company that offers contracts with major brands and a diverse portfolio of clients. The position is part of the InnerSource & Open Source Office (ISOSO) team focused on Software Supply Chain Compliance & Integrity.

• Minimum 5 years of experience in software development focused on open source compliance.
• Bachelor's degree in Computer Science, Software Engineering, or related field.
• Proven experience with CI/CD pipelines and integrating open source compliance checks.
• Thorough understanding of open source licenses and compliance best practices.
• Experience working with CycloneDX or similar SBOM formats.
• Proficiency in managing dependencies across multiple programming languages such as .NET/C#, Python, Java, C/C++, Node.JS/TypeScript.
• Familiarity with Linux and Microsoft Windows operating systems and their open source components.
• Fluent in English and Polish languages.
• Residence in Poland.

Nice to have:

• Experience in regulated industries like healthcare or medical devices.
• Knowledge of container and virtual machine technologies.
• Deep familiarity with Golang and the Syft codebase.

• Collaborate with software architects and senior developers to generate comprehensive Software Bills of Materials (SBOM) for commercial products.
• Review and analyze open source software usage to ensure compliance with relevant regulations and licenses.
• Integrate open source compliance checks into CI/CD pipelines to identify compliance issues early.
• Manage dependencies for programming languages such as .NET/C#, Python, Java, C/C++, Node.JS/TypeScript considering proprietary and open source components.
• Create and maintain compliance documentation including policies and best practices.
• Utilize expertise in CycloneDX to improve compliance processes.
• Stay informed about industry regulations, particularly FDA requirements.
• Provide training and support to development teams on open source compliance.
• Drive upstream contributions to Syft in Golang to enhance artifact analysis and supply chain security.

Residence in Poland requirement.