Qualcomm

#Senior SBOM Engineer

Qualcomm$111K — $166K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Engineering, Information Systems, Computer Science, or related field plus 5+ years of relevant experience; or Master's degree plus 3+ years; or PhD in a related field.
  • Strong proficiency in Linux environment and software development.
  • Experience with programming languages, particularly Python, C/C++, or JavaScript.
  • Solid understanding of open source compliance principles and software development workflows.
  • Familiarity with software composition analysis tools and SBOM generation.

Responsibilities

  • Conduct thorough reviews of open-source and third-party software for compliance and licensing.
  • Generate and validate Software Bill of Materials (SBOMs) using SPDX or CycloneDX formats.
  • Analyze software composition for transitive dependencies and potential supply chain risks.
  • Develop automation tools to enhance efficiency in compliance processes and SBOM generation.
  • Embed compliance controls into CI/CD and development workflows.
  • Collaborate with cross-functional teams to address findings and facilitate secure product releases.
  • Maintain documentation and assist with audit requests regarding open source and SBOMs.

Benefits

  • Opportunity for annual discretionary bonuses and RSU grants.
  • Comprehensive benefits package to support various aspects of employee well-being.
  • Flexible work arrangements to promote a balanced lifestyle.
  • Professional development programs and opportunities for growth within the company.
Full Job Description
Job Area:
Engineering Group, Engineering Group > Software Engineering

General Summary:
***This position is not eligible for Qualcomm immigration sponsorship***

Qualcomm's Open Source Engineering team works with internal and external stakeholders to develop, maintain, and enhance the engineering processes, tools, and systems necessary to support the organization's open source, third-party software, and software supply-chain objectives.

As a Senior SBOM Engineer, you will help drive open source compliance, Software Bill of Materials (SBOM) governance, and software supply chain assurance across a diverse portfolio of products and technologies.

In this role, you will work at the intersection of software engineering, open source compliance, automation, and cybersecurity. You will analyze complex software systems, identify and assess open source and third-party components, generate and validate SBOMs, and partner with engineering, legal, security, and product teams to ensure compliant and secure software releases. The role also includes developing automation and tooling that scales compliance activities and integrates them into engineering workflows.

Minimum Qualifications:
• Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.
OR
Master's degree in Engineering, Information Systems, Computer Science, or related field and 1+ year of Software Engineering or related work experience.
OR
PhD in Engineering, Information Systems, Computer Science, or related field.
• 2+ years of academic or work experience with Programming Language such as C, C++, Java, Python, etc.

Key Responsibilities
  • Perform open source and third-party software reviews, including license, dependency, and distribution analysis.
  • Generate, analyze, and validate SBOMs using industry-standard formats such as SPDX and CycloneDX.
  • Investigate software composition, transitive dependencies, and software supply chain risks.
  • Develop automation and tooling to improve compliance, SBOM generation, and review efficiency.
  • Integrate compliance controls into development, build, and CI/CD workflows.
  • Collaborate with engineering, legal, security, and product teams to resolve findings and support product releases.
  • Support customer, regulatory, and audit requests related to open source software and SBOM disclosures.
  • Create and maintain technical documentation, standards, and developer guidance.
  • Independently lead complex reviews and contribute to process improvements and operational excellence.


Required Qualifications
  • Bachelor's degree in Computer Science, Computer Engineering, or related technical field OR Master's degree in an equivalent technical field.
  • 5+ years of software engineering, open source compliance, application security, DevSecOps, or related experience.
  • Strong Linux and software development fundamentals.
  • Experience with Git and modern source-control workflows.
  • Proficiency in Python and experience with one or more languages such as C/C++, JavaScript, Go, or Rust.
  • Experience with build systems and package management ecosystems (Yocto, Gradle, Maven, npm, pip, etc.).
  • Knowledge of open source licensing, compliance principles, and software development workflows.
  • Experience generating or validating SBOMs and working with software composition analysis tools.
  • Strong analytical, troubleshooting, documentation, and communication skills.


Preferred Qualifications
  • Experience with SPDX, CycloneDX, VEX, or related software supply chain standards.
  • Familiarity with tools such as Black Duck, FossID, ScanCode, ORT, Syft, or Snyk.
  • Experience with containers, Kubernetes, and cloud-native environments.
  • Knowledge of software supply chain security, vulnerability management, and regulatory requirements related to SBOMs.
  • Experience supporting Linux, Android, embedded, or cloud-based products.


Pay range and Other Compensation & Benefits:
$111,300.00 - $166,900.00

The above pay scale reflects the broad, minimum to maximum, pay scale for this job code for the location for which it has been posted. Even more importantly, please note that salary is only one component of total compensation at Qualcomm. We also offer a competitive annual discretionary bonus program and opportunity for annual RSU grants (employees on sales-incentive plans are not eligible for our annual bonus). In addition, our highly competitive benefits package is designed to support your success at work, at home, and at play. Your recruiter will be happy to discuss all that Qualcomm has to offer - and you can review more details about our US benefits at this link.

If you would like more information about this role, please contact Qualcomm Careers.

About Qualcomm

Qualcomm Ventures is the investment arm of Qualcomm Incorporated. Founded in 2000, Qualcomm Ventures is a corporate venture capital fund with over 150 active portfolio companies and more than 20 exits over a billion dollars, including 99 Taxis, Cruise Automation, Fitbit, Invensense, NQ Mobile, Waze, and more. As a global investor, Qualcomm Ventures helps connect entrepreneurs to the resources, relationships, and deep industry expertise they need to succeed in the mobile technology ecosystem.

Qualcomm Careers

Joining Qualcomm offers more than just a job opportunity; it's a gateway to a career infused with innovation, leadership, and growth. As a pivotal leader in the world of wireless technology, Qualcomm stands at the forefront of digital communication advancements. Our team of professionals is dedicated to pushing the boundaries of what's possible, making this an ideal time to become part of our global community.

Work You’ll Do

At Qualcomm, you will collaborate with some of the brightest minds in the industry, engaging in work that transforms the way the world connects, computes, and communicates. Our diverse team is driven by a shared passion for creating path-breaking wireless technologies that empower mobile ecosystems worldwide.

Innovate and Grow

Embrace the opportunity to innovate alongside leaders in the field and contribute to projects that have a global impact. Qualcomm is committed to fostering a culture of innovation and continuous improvement, ensuring that every team member has the opportunity to make a significant impact.

Professional Growth and Development

Qualcomm is dedicated to the professional growth of its employees, offering unparalleled benefits, diverse career paths, and extensive training programs that encourage professional and personal development. Whether you're looking for leadership roles or specialized technical positions, Qualcomm provides the resources and support to help you drive your career forward.

Diversity and Inclusion

We believe that a diverse workforce fuels our innovation and reflects our commitment to making a positive impact. Qualcomm’s inclusive culture and diversity training programs are designed to promote an environment where all employees can thrive.

Internship Programs

Start your career with Qualcomm through our dynamic internship programs. These opportunities allow you to apply your skills in real-world scenarios, providing a robust foundation for future employment. Internships at Qualcomm are characterized by meaningful projects and the chance to network with industry leaders.

Join Our Team

Explore the numerous job opportunities at Qualcomm, from engineering to marketing, and discover how your skills and interests align with our mission. We are continuously hiring creative and driven individuals who are ready to contribute to our culture of innovation.

Prepare for Your Interview

Ready to join our team? Prepare your resume to highlight your relevant experience and skills. Our interview process is designed to understand your capabilities and how they align with our goals at Qualcomm. We look for passionate, curious, and innovative team players who are ready to take the next step in their careers.

Stay Connected

Keep up to date with the latest at Qualcomm by following our careers blog. Gain insider perspectives and industry-leading insights that can help you navigate your professional journey.

Career Opportunities Await

At Qualcomm, your career is what you make of it. With support for your ambitions and a network of global professionals, the opportunities to advance and excel are nearly limitless. Join us and be part of a team that’s leading the world in next-generation technology.

Search Qualcomm Jobs

Discover the positions that match your skills and interests. We are looking for individuals who are ready to make an impact and excel in a fast-paced, innovative environment.

Explore Qualcomm Careers

Whether you're seeking an internship, a first job, or a leadership position, Qualcomm offers a range of opportunities across various disciplines. Let your career journey begin here, where innovation, leadership, and growth come together to create extraordinary outcomes.
Learn more about Qualcomm
Size
45,000 employees
Market Cap
$122.5 billion
Industry
Net Income
$6.7 billion
Founded
1985
5 Year Trend
+14.7%
Revenue
$26.6 billion
NASDAQ

Similar Jobs

More Jobs at Qualcomm

More Information Technology Jobs

Find similar #Senior SBOM Engineer jobs: