QNX Open Source Analyst

Worker Sub-Type:

Job Description:

QNX enhances the human experience and amplifies technology-driven industries, providing a trusted foundation for software-defined businesses to thrive. The business leads the way in delivering safe and secure operating systems, hypervisors, middleware, solutions, and development tools, along with support and services delivered by trusted embedded software experts. With a focus on reducing hardware dependency and increasing efficiency, QNX empowers organizations to unlock new possibilities in areas like high-performance computing at the edge, standards-based virtualization technologies, and cloud enablement. QNX® technology has been deployed in the world’s most critical embedded systems, including more than 275 million vehicles on the road today. QNX® software is trusted across industries including automotive, medical devices, industrial controls, robotics, commercial vehicles, rail, and aerospace and defense.

Are you the person we are looking for?

QNX’s Open Source Program Office is seeking talented individuals with a passion for open source software and the aptitude to blend software, legal, and business skills. This role will blend development and analysis work in order to further the mission of the Open Source Program. The successful candidate will investigate and discover the intricacies of open source utilization within the embedded software ecosystem. This role is critical to ensuring we meet our license compliance and software bill of materials objectives, enabling the organization to utilize open source effectively within our product portfolio. This role will also build deliverables that are customer facing in order to help those customers meet their risk management objectives. With these skills in-hand, the candidate will take ownership of automation solutions and further develop them to improve our operational capacity and work to discover new development opportunities to further our mission.

This role is ideal for those with development experience looking to utilize their critical thinking and analytical skills in order to discover and mitigate technical and legal risks, and to help development teams better understand the support requirements for their open source usage. This role will require communicating confidential and sensitive information to a variety of stakeholders including technical and business roles of various seniority.

What You'll Do:

• Develop automation solutions primarily in Python in order to drive improvements into our operations
• Troubleshoot, bugfix, and maintain existing automation solutions
• Operate software composition analysis tools
• Perform forensic analysis of the open source used within our embedded software products.
• Interpret data in order to ascertain the impact of the open source as used in our products
• Ensure compliance to open source license obligations and create license compliance material
• Construct Software Bill of Materials for our products and ensure data accuracy and quality
• Communicate technical and legal challenges to stakeholders

What We're Looking For:

• Advanced knowledge of software development practices and/or open-source software analysis, with the capability to navigate and assess complex technical environments

• Technical competency with multiple programming languages such as C, C++, Python, Rust
• Familiarity with Open Source licenses (Apache 2.0, MIT, LGPL, GPL, etc)
• Demonstrated experience with automated build tools, version control systems, and artifact repositories such as Jenkins, Subversion, Git, Perforce, Docker, Maven, and Gradle
• Strong interpersonal skills with demonstrated ability to work with diverse/cross-functional teams
• Passion for investigation, and utilizing various tools to perform research and solve problems

It's Great If You Have:

• Experience contributing to open source projects
• Previous experience using Software Composition Analysis tools (e.g. FOSSID, BlackDuck, Flexera, etc.)
• Knowledge of Software Bill of Materials formats (SPDX, Cyclone DX)
• B.S. or M.S. degree (degree in Computer Science, Engineering or equivalent)

Why You’ll Love This Role:

• This is an opportunity to spend your time investigating the intricacies of the software supply chain and the impact of third-party code on a commercial product
• Pursue complicated real world risk scenarios
• Build new tools and automation
• Influence the quality and posture of a product deployed in safety-critical environments across the world
• Collaborate with world-class embedded engineers, security professionals, and other stakeholders
• Turn curiosity into real-world impact

Scheduled Weekly Hours:

Compensation Hiring Base Salary Range:

Please be advised that the compensation hiring range indicated herein is provided solely as a good-faith estimate of expected base compensation for the position. The actual compensation offered will be determined at the time of hire and is contingent upon multiple factors, including but not limited to the candidate’s qualifications, relevant experience, demonstrated skills, and results of assessments conducted during the hiring process.

Bonus:

Benefits:

Disclosure of Position Status:

Disclosure of Artificial Intelligence:

We do not use artificial intelligence (AI) to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed and evaluated by our hiring team.