Open Source Compliance Analyst

Open Source Software Compliance Engineer

18 Month Contract, Hybrid, Cork

About the Company

My client is a world leading wireless technology innovator. They have an immediate requirement for a skilled Compliance Engineer to join their team , to ensure products and services meet opensource licensing obligations and industry best practices.

About the Role

This role requires strong hands-on experience in FOSS (Free and Open Source Software) compliance operations.

The primary responsibilities include ensuring license compliance, enhancing software license reporting, and maintaining a software bill of materials (SBOM) and FOSS reports for all product lines. Additionally, the role involves automating compliance processes, educating the development community, and collaborating with various teams to ensure adherence to licensing obligations.

Key Responsibilities:

• Perform FOSS compliance analysis for software products and services across the business units or product lines (source and binaries).
• Identify and analyze OSS licenses and assess impact on commercial distribution.
• Maintain accurate inventories of components, licenses, obligations, and attributions; ensure traceability across source code, third-party binaries, images, and containers.
• Operate and integrate SCA tooling (FossID preferred) and embed scans into development workflows.
• Automate compliance workflows (Python) for scanning, SBOM generation/validation, approvals, reporting, and release readiness checks.
• Apply SBOM standards and best practices (SPDX, CycloneDX) across the product lifecycle; publish, validate, and version SBOMs for releases.
• Conduct OSS risk assessments (licensing, security, provenance) and recommend practical remediation strategies (substitution, configuration, exception management).
• Guide development teams on OSS intake, dependency linking, proper attribution, notice files, and license-compliant usage patterns.
• Stay current on licensing trends, regulatory developments, and community practices; contribute to continuous improvement of policies and processes.
• Support reviews, audits, and governance activities, including prerelease compliance gates, customer/partner disclosures, and internal/external audits.

Requirements:

• Experience with FOSS compliance analysis, reporting and publishing.
• Hands on experience using Software Composition Analysis (SCA) tools such as FossID, Blackduck or equivalent.
• Familiarity with SBOM standards (SPDX, CycloneDX) and validation best practices.
• Familiarity or experience with OpenChain standard and implementation.
• Ability to read programming languages such as C/C++, Java, Python, Go.
• Ability to automate license compliance reporting and integrate it into CI/CD processes.
• Strong attention to detail and high-quality output.
• Ability to work independently, drive improvements, meet schedules, and exhibit strong writing skills.
• Experience with Linux OS is preferred.
• Required : Bachelor's, Computer Engineering or equivalent
• Preferred : Master's, Computer Engineering or equivalent

Remuneration:

Daily rate contract between 300-400 per day depending on experience.

Contact

Please contact Charlie Bigger on 01 5927867 or email or simply click the apply button.

To view all live jobs with Brightwater and market insights, please visit our website: www.brightwater.ie