QNX Open Source Analyst

QNX enhances the human experience and amplifies technology-driven industries, providing a trusted foundation for software-defined businesses to thrive. The business leads the way in delivering safe and secure operating systems, hypervisors, middleware, solutions, and development tools, along with support and services delivered by trusted embedded software experts. With a focus on reducing hardware dependency and increasing efficiency, QNX empowers organizations to unlock new possibilities in areas like high-performance computing at the edge, standards-based virtualization technologies, and cloud enablement. QNX® technology has been deployed in the world’s most critical embedded systems, including more than 275 million vehicles on the road today. QNX® software is trusted across industries including automotive, medical devices, industrial controls, robotics, commercial vehicles, rail, and aerospace and defense.

QNX’s Open Source Program Office is seeking talented individuals with a passion for open source software and the aptitude to blend software, legal, and business skills. This role will blend development and analysis work in order to further the mission of the Open Source Program. The successful candidate will investigate and discover the intricacies of open source utilization within the embedded software ecosystem. This role is critical to ensuring we meet our license compliance and software bill of materials objectives, enabling the organization to utilize open source effectively within our product portfolio. This role will also build deliverables that are customer facing in order to help those customers meet their risk management objectives. With these skills in-hand, the candidate will take ownership of automation solutions and further develop them to improve our operational capacity and work to discover new development opportunities to further our mission.

This role is ideal for those with development experience looking to utilize their critical thinking and analytical skills in order to discover and mitigate technical and legal risks, and to help development teams better understand the support requirements for their open source usage. This role will require communicating confidential and sensitive information to a variety of stakeholders including technical and business roles of various seniority.
 

• →Develop automation solutions primarily in Python in order to drive improvements into our operations
• →Troubleshoot, bugfix, and maintain existing automation solutions
• →Operate software composition analysis tools
• →Perform forensic analysis of the open source used within our embedded software products.
• →Interpret data in order to ascertain the impact of the open source as used in our products
• →Ensure compliance to open source license obligations and create license compliance material
• →Construct Software Bill of Materials for our products and ensure data accuracy and quality
• →Communicate technical and legal challenges to stakeholders

• Advanced knowledge of software development practices and/or open-source software analysis, with the capability to navigate and assess complex technical environments
• Technical competency with multiple programming languages such as C, C++, Python, Rust
• Familiarity with Open Source licenses (Apache 2.0, MIT, LGPL, GPL, etc)
• Demonstrated experience with automated build tools, version control systems, and artifact repositories such as Jenkins, Subversion, Git, Perforce, Docker, Maven, and Gradle                          
• Strong interpersonal skills with demonstrated ability to work with diverse/cross-functional teams
• Passion for investigation, and utilizing various tools to perform research and solve problems

• Experience contributing to open source projects
• Previous experience using Software Composition Analysis tools (e.g. FOSSID, BlackDuck, Flexera, etc.)
• Knowledge of Software Bill of Materials formats (SPDX, Cyclone DX)
• B.S. or M.S. degree (degree in Computer Science, Engineering or equivalent)

• This is an opportunity to spend your time investigating the intricacies of the software supply chain and the impact of third-party code on a commercial product
• Pursue complicated real world risk scenarios
• Build new tools and automation
• Influence the quality and posture of a product deployed in safety-critical environments across the world
• Collaborate with world-class embedded engineers, security professionals, and other stakeholders
• Turn curiosity into real-world impact

#LI-KH1

We do not use artificial intelligence (AI) to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed and evaluated by our hiring team.