Software Supply Chain Engineer (f/m/x)

Sii is hiring for the InnerSource & Open Source Office (ISOSO) team, focusing on Software Supply Chain Compliance & Integrity to support compliance with open source software usage in commercial products.

• Minimum 5 years of experience in software development focused on open source compliance
• Bachelor's degree in Computer Science, Software Engineering, or related field
• Proven experience with CI/CD pipelines integrating open source compliance checks
• Thorough understanding of open source licenses and compliance best practices
• Experience with CycloneDX or similar SBOM formats
• Proficiency managing dependencies across multiple languages: .NET/C#, Python, Java, C/C++, Node.JS/TypeScript
• Familiarity with Linux and Microsoft Windows operating systems and their interaction with open source components
• Fluent in English and Polish
• Residence in Poland

Nice to have:

• Experience in regulated industries such as healthcare or medical devices
• Knowledge of container and virtual machine technologies
• Deep familiarity with Golang and the Syft codebase

• Collaborate with software architects and senior developers to generate comprehensive Software Bills of Materials (SBOM) detailing open source components and dependencies
• Review and analyze open source software usage for compliance with regulations and licenses considering deployment and architecture
• Integrate open source compliance checks into CI/CD pipelines for early risk identification
• Manage dependencies for at least two programming languages such as .NET/C#, Python, Java, C/C++, or Node.JS/TypeScript, covering proprietary and open source components
• Create and maintain compliance documentation including policies and best practices
• Utilize expertise in CycloneDX to improve compliance process accuracy and efficiency
• Stay informed on industry regulations (e.g., FDA requirements)
• Provide training and support to development teams on open source compliance
• Drive upstream contributions to Syft in Golang to enhance artifact analysis and supply chain security

Residence in Poland is required. Consent given for personal data processing by Sii sp. z o.o. for recruitment purposes.