Senior SBOM Engineer

Qualcomm

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
San Diego, CA
Salary
$111,300–$166,900 / yr
Posted
3 days ago
Freshness
Confirmed live 2 days ago
Closes
Mar 7, 2027

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $183k
This role $139k
$99k most similar roles pay here $229k

This role pays less than 83% of similar roles. Most pay $150,874–$216,000 — the shaded band above. At the midpoint, this role pays about $139k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About Qualcomm

Qualcomm is a leading American semiconductor and telecommunications company based in San Diego, CA.

Qualcomm currently has 623 open roles on FindRole.

Listed pay typically runs $148,300–$222,500 across 603 roles with salary data.

Most-posted roles

View all roles at Qualcomm

At a glance

TL;DR · Senior SBOM Engineer

As a Senior SBOM Engineer on the Open Source Engineering team, you will drive open source compliance, Software Bill of Materials governance, and software supply chain assurance across various products. You will analyze complex systems to identify third-party components, generate and validate SBOMs using SPDX and CycloneDX formats, and develop automation tools to integrate compliance into CI/CD workflows. The role involves investigating transitive dependencies, managing risk, and collaborating with legal and security teams to ensure secure releases. Required skills include proficiency in Python, C, C++, Java, Go, or Rust, along with experience in Linux environments, Git, and package management systems like Yocto, Gradle, Maven, npm, and pip. You will also utilize tools such as Black Duck, FossID, ScanCode, ORT, Syft, or Snyk to manage software composition analysis and vulnerability risks.

What you'll do

  • Perform open source and third-party software reviews including license, dependency, and distribution analysis.
  • Generate, analyze, and validate SBOMs using industry-standard formats such as SPDX and CycloneDX.
  • Investigate software composition, transitive dependencies, and software supply chain risks.
  • Develop automation and tooling to improve compliance efficiency and scale SBOM generation.
  • Integrate compliance controls into development, build, and CI/CD workflows.
  • Support customer, regulatory, and audit requests regarding open source software and SBOM disclosures.
  • Create and maintain technical documentation, standards, and developer guidance for the organization.

What we're looking for

  • Bachelor's degree in Computer Science, Computer Engineering, or a related technical field (or Master's degree in an equivalent field).
  • 5+ years of experience in software engineering, open source compliance, application security, DevSecOps, or related fields.
  • 2+ years of academic or work experience with programming languages such as C, C++, Java, Python, etc.
  • Strong Linux and software development fundamentals.
  • Proficiency in Python and experience with at least one other language like C/C++, JavaScript, Go, or Rust.
  • Experience with Git, build systems, and package management ecosystems like Yocto, Gradle, Maven, npm, or pip.
  • Knowledge of open source licensing, compliance principles, and experience generating or validating SBOMs.
  • Familiarity with SPDX, CycloneDX, VEX, or tools such as Black Duck, FossID, ScanCode, ORT, Syft, or Snyk (preferred).

More like this

Similar roles

Senior Engineer

Qualcomm

San Diego, CA 24 days ago $111,300$166,900
C C++ Java Python API Git Perforce Source Code Management Linux kernel YOCTO Cloud Edge Unit Testing
2+ yrs exp

Senior BOM Sourcing Engineer

Anduril Industries

Costa Mesa, CA 78 days ago $146,000$194,000
Cost Engineering NPI value-stream mapping Electronics Design Procurement Component Sourcing Manufacturing Simulation
5+ yrs exp

Senior BOM Sourcing Engineer

Anduril Industries

Morrisville, NC 71 days ago $120,000$159,000
BOM Cost Engineering value-stream mapping NPI Electronics Design Supplier Development Procurement Sourcing Manufacturing Component Qualification Solid Rocket Motor
5+ yrs exp

Senior BOM Sourcing Engineer

Anduril Industries

Huntsville, AL 29 days ago $110,000$166,000
Cost Engineering NPI value-stream mapping Electronics Design Sourcing Procurement Component Qualification Manufacturing Simulation Solid Rocket Motor (SRM)
5+ yrs exp

Senior Embedded Engineer

Anduril Industries

Hudson, NH 14 days ago $165,000$218,000
FPGA VHDL Verilog SystemVerilog RTL Xilinx Vivado Intel Quartus Python MATLAB Embedded Linux Git AXI Ethernet SPI I2C DDR SERDES
10+ yrs exp

Senior SRAM Engineer

Nvidia

Remote 18 days ago $196,000$310,500
SRAM Circuit Design Cadence Virtuoso SPICE Verilog Python Perl Shell Static Timing Analysis EM IR Analysis Formal Functional Verification Layout
10+ yrs exp Remote