We are looking for an Open Source Software Compliance Coordinator with experience in Application Security, Software Composition Analysis (SCA), and open-source license compliance. The role involves identifying open-source components, assessing license obligations and vulnerabilities, and helping development teams maintain compliance across software applications.
Job Description
You will work with application delivery teams and security stakeholders to coordinate open-source compliance activities, review scan results, and address licensing and vulnerability risks. The role also involves supporting compliance audits, improving DevSecOps practices, and developing training materials to strengthen organization-wide security awareness.
This position follows a hybrid working model, with an expectation to work from the Bengaluru office at least three days per week. Travel to the client office in C. V. Raman Nagar, Bagmane, may be required for two to three days or as applicable.
Key Responsibilities
• Coordinate open-source compliance activities across application delivery teams.
• Review Software Composition Analysis (SCA) scan results and help teams address identified risks.
• Use tools such as Black Duck, Sonatype Lifecycle/Sonatype IQ, Mend.io, Revenera Code Insight, or FOSSID to identify open-source components and licenses.
• Interpret open-source and commercial license terms and determine associated obligations.
• Support risk assessment and acceptance workflows for non-compliant licenses.
• Coordinate source-code scans and assess code or package origins, including potential plagiarism.
• Review Software Bill of Materials (SBOM) data and support package and snippet scanning.
• Develop compliance training materials and educate teams on open-source license categories.
• Collaborate with security and engineering teams to improve DevSecOps and application security practices.
• Track and communicate compliance