19 дней назад
QNX Open Source Analyst
90 000 - 126 000CAD
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
QNX Open Source Analyst (Python/Open Source Compliance): Investigating open-source usage in embedded software products and developing automation for license compliance and software bill of materials accuracy with an accent on forensic analysis, technical risk assessment, and customer-facing compliance deliverables. Focus on maintaining software composition analysis workflows, interpreting license obligations, and communicating technical and legal challenges to cross-functional stakeholders.
Location: Ottawa, Ontario, Canada
Base salary: $90,000–$126,000 per year
Company
's QNX business develops trusted embedded operating systems, hypervisors, middleware, development tools, and related services for safety-critical industries.
What you will do
- Develop, troubleshoot, maintain, and improve Python-based automation solutions.
- Operate software composition analysis tools and perform forensic analysis of open-source software used in embedded products.
- Interpret open-source data to assess product impact and technical or legal risks.
- Ensure compliance with open-source license obligations and create license compliance materials.
- Construct accurate Software Bill of Materials for products.
- Communicate technical and legal challenges to technical and business stakeholders.
Requirements
- Advanced knowledge of software development practices and/or open-source software analysis.
- Technical competency with multiple programming languages, including C, C++, Python, and Rust.
- Familiarity with open-source licenses such as Apache 2.0, MIT, LGPL, and GPL.
- Experience with automated build tools, version control systems, and artifact repositories such as Jenkins, Subversion, Git, Perforce, Docker, Maven, and Gradle.
- Strong interpersonal skills and the ability to work with diverse cross-functional teams.
- Investigation, research, and problem-solving skills.
Nice to have
- Experience contributing to open-source projects.
- Experience with Software Composition Analysis tools such as FOSSID, Black Duck, or Flexera.
- Knowledge of Software Bill of Materials formats including SPDX and CycloneDX.
- B.S. or M.S. degree in Computer Science, Engineering, or an equivalent field.
Culture & Benefits
- Work on software supply-chain risks and third-party code in commercial products.
- Build tools and automation for products deployed in safety-critical environments.
- Collaborate with embedded engineers, security professionals, and other stakeholders.
- Benefits may include medical, dental, vision, life, disability, retirement, employee share purchase, and paid time off programs.
- Eligible full-time employees may participate in the Variable Incentive Pay program.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →