Software Engineer (Golang)
Summary
Builds and secures software supply chains for regulated healthcare apps, focusing on open-source compliance, SBOMs, and security checks in CI/CD pipelines using Go.
We are looking for an experienced Software Supply Chain Engineer to join an international team supporting the development of regulated healthcare solutions. In this role, you will be responsible for Open Source Compliance, Software Bill of Materials (SBOM) management, and software supply chain security, working closely with software architects, developers, and DevOps teams.
MUST HAVE:
5+ years of experience in Software Engineering, DevSecOps, Software Supply Chain Security, or a related field.
At least 2 years of hands-on experience in Open Source Compliance.
Experience with Golang.
Experience integrating compliance and security checks into CI/CD pipelines.
Strong understanding of open source licensing (e.g. MIT, Apache 2.0, GPL, LGPL) and compliance best practices.
Hands-on experience with Software Bill of Materials (SBOM), preferably using CycloneDX.
Experience managing dependencies in at least two of the following ecosystems: Python, Java, .NET/C#, C/C++, Node.js/TypeScript.
Good knowledge of Linux and Windows operating systems.
Familiarity with containers and virtualization technologies.
Strong analytical and problem-solving skills.
Excellent communication skills and ability to collaborate with cross-functional teams.
Professional level of English.
NICE TO HAVE:
Familiarity with Syft or other SBOM generation tools.
Knowledge of software supply chain security best practices.
Experience working in a regulated industry (Healthcare, Medical Devices, or Pharma).
Understanding of FDA or similar regulatory requirements.
REQUIREMENTS:
Opportunity to work on innovative healthcare solutions with global impact.
Collaboration with international engineering teams.
Exposure to modern software supply chain security and open source governance practices.
Long-term project in a collaborative and technology-driven environment.
Opportunity to contribute to open source initiatives and work with industry-standard tools.