Senior Engineer / Technical Lead (Python Yocto)

• Lead the design and development ofSBOM generation pipelineswithinYocto-based embedded build systems
• Integrate and validateSPDX 3.0-compliant SBOMsusing open-source and custom tools
• Automate SBOM creation as part of theCI/CD pipelines using Jenkins and other DevOps tools
• Work with security teams to analyze and trackOpen-Source Vulnerabilities (CVE)from generated SBOMs
• Collaborate with development teams to ensure accurate tracking of software components, licenses, and dependencies
• Maintain and improve tooling forsource scanning, license compliance, and vulnerability management
• Analyze complex source code bases and integrate SBOM processes withSCM systems (Git, Gerrit, etc.)
• Write and maintainPython scriptsfor build integration, reporting, and automation of SBOM tasks

What Are We Looking For

• Experience withYocto Build System(BitBake, meta layers, custom recipes)
• Strong hands-on experience withSPDX standards (preferably 3.0)andSBOM generation tools(e.g., SPDX tools, FOSSology, CycloneDX, scancode-toolkit)
• Solid understanding ofCI/CD concepts and Jenkins pipeline development
• Proficiency withGit, Gerrit, JIRA, and other collaborative tools
• In-depth knowledge ofPython scripting, including advanced concepts
• Experience working withMakefiles, toolchains, and compiler optimization in embedded environments
• Strong grasp ofopen-source licensing,compliance, andsecurity scanning (CVE/NVD tools)
• Excellent problem-solving, communication, and collaboration skills
  Location - Ahmedabad, Pune, Bangalore