{"id":4202156,"url":"https://alion.io/job/abb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems","title":"Master Thesis Work - Industrializing e-SBOM Traceability across DevOps, Windchill and Product Lifecycle Systems","company":{"id":44977,"name":"ABB","domain":"abb.com","url":"https://alion.io/company/abb","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":397,"ghost_share":0,"stale_share":0.353,"repost_share":0.008,"time_to_fill_p50_days":23,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Early Careers","role_family":"Early Careers","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Malmö, Sweden"],"countries":["SE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"OWASP Dependency-Track","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SBOM","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-11-11T00:00:00Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-13T05:42:08Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"At ABB, we help industries outrun - leaner and cleaner. Here, progress is an expectation - for you, your team, and the world. As a global market leader, we’ll give you what you need to make it happen. It won’t always be easy, growing takes grit. But at ABB, you’ll never run alone. Run what runs the world.\nThis Position reports to:\nR&D Global Unit LeadYour role and responsibilities\nExecution of this Thesis work will be done within ABB Automation PCP, a unit within ABB’s business area Process Automation. Automation PCP develops automation products - hardware and software - for monitoring, process control and optimization. We have automation products for all kind of industries.\nWithin Automation PCP, we would like to continue the previous master's thesis on extended Software Bills of Materials (e-SBOMs) by moving from a successful proof of concept toward an industrially usable, governed, and maintainable solution. The work should investigate how artifact-centric e-SBOM information can be generated, exchanged, aggregated, baselined, and traced across the software lifecycle and across ABB engineering systems.\nDetails:\nPeriod: TBD\nNumber of credits: 30 ECTS\nNumber of students for this thesis work: 1 or 2\nLocation: Mostly on site - Malmo, Sweden\nThe thesis will investigate an architecture in which development environments and CI/CD pipelines generate controlled e-SBOM metadata for exact artifact versions, while product-lifecycle, release, and vulnerability-management systems consume appropriate views of that information. The study should use ABB System 800xA as the main case, but the proposed principles and interfaces should be generic enough for reuse by other ABB products and customer systems.\nThe work should explicitly address integration and governance boundaries among systems such as Azure DevOps, Windchill, Dependency-Track, source repositories, artifact repositories, and approved release-documentation or archive locations. A key topic is how to avoid uncontrolled duplication while preserving authoritative ownership, immutable release evidence, product-level traceability, and continuously updated vulnerability information.\nA proof-of-concept implementation is expected. It should use e.g. scripts and REST APIs to demonstrate a representative flow from a controlled build artifact to an e-SBOM, aggregation or transformation, validation, and publication or registration in a downstream system. The proof of concept should include automated checks and readable output for both tools and human reviewers.\nResearch questions to consider as input:\nHow can an artifact-centric e-SBOM information model extend standard SBOM data without duplicating information already governed in other systems?\nHow should identity, version, revision, dependency, lifecycle state, provenance, build information, test evidence, requirements, and product or release relationships be represented and validated?\nWhich system should be authoritative for each data element, and how should conflicting or superseded information be detected and resolved?\nHow can e-SBOMs be generated and aggregated automatically across component, product, and system levels while detecting missing references, cycles, incompatible versions, and unresolved dependencies?\nHow should Windchill, Dependency-Track, Azure DevOps, and archive-safe release documentation exchange information while separating released baselines from changing vulnerability-monitoring views?\nWhat measurable benefits and limitations does the proposed solution provide for traceability, impact analysis, reproducibility, lifecycle management, compliance evidence, and configuration status accounting?\nExpected result:\nThe expected result is a master's-level thesis containing a literature and standards review, stakeholder and requirements analysis, a documented logical architecture and information model, a working proof of concept, and an evaluation using representative ABB use cases. The report should provide implementable recommendations, known limitations, security and maintenance considerations, and a roadmap from proof of concept to production use.\n Qualifications for the role\nABB are looking for students for a thesis work at master’s degree level in Software Engineering, Computer Science, Information Systems, Industrial Engineering, or a related field.\nABB are looking for students in the education phase where a thesis project is needed to finalize the education.\nYou have at least a basic understanding of configuration management, including configuration items, identification, baselines, versioning, change control, status accounting, and traceability.\nYou understand DevOps and CI/CD concepts and have practical experience with scripting and REST APIs, for example using Python or PowerShell.\nYou have general knowledge of Software Bills of Materials (SBOMs), software dependencies, software supply-chain information, and lifecycle traceability.\nYou can work analytically with information distributed across tools and can evaluate both technical solutions and governance aspects such as data ownership, authoritative sources, maintainability, and auditability.\nEnglish is ABB's defined corporate language. Understanding Swedish will simplify collaboration but is not mandatory.\nMore about us\nWe value people from different backgrounds. Apply today for your next career step within ABB and visit www.abb.com to learn about the impact of our solutions across the globe. #MyABBStory\nRecruiting Manager Ali Houmani, +46 72 461 43 24.\nFor technical thesis related questions please contact Christer Wibom, +46 761369496.\nPositions are filled continuously. Please apply with your CV, academic transcripts, and a cover letter in English.\nWe look forward to receiving your application!\nA future opportunity\nThis role is part of our talent pipeline, which means it’s not currently open, but we’re always looking for curious minds, bold thinkers, and people who want to make an impact.\nClick Apply to express your interest and be considered for future opportunities that match your experience and aspirations.\nAt ABB, we welcome people from all backgrounds and believe that diverse perspectives help us build a cleaner, smarter future.\nApply today or visit https://www.abb.com to learn more about how we help run what runs the world.","description_format":"text","description_chars":6308,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[{"language":"Swedish","level":"All levels","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Sweden","iso":"SE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Power Grid","Industrial Automation","Industrial Robotics"],"lifecycle":[{"event":"open","at":"2026-11-12T22:34:48Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":23,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-13T07:36:23Z"},"pay":null,"html_url":"https://alion.io/job/abb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems","json_url":"https://alion.io/job/abb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems.json","meta":{"generated_at":"2026-11-13T07:36:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15842,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":44977},"rest":"https://alion.io/mcp/rest/get_company?id=44977"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fabb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fabb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fabb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/abb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fabb-master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4202156}},{"tool":"search_jobs","arguments":{"company":"abb.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4202156},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}