Bullisher is a data-centric fintech solution provider in the aerospace and defense industry for institutional level investors, looking to disrupt and revolutionize a $3 trillion dollar industry. We spearhead an industry-leading Blackbox to facilitate and administer trade agreements pioneered by a vehicle driven by our new generation benchmark delivering solutions through innovation with uncompromising agility. Predicts trends in the aerospace and government defense entities, predicts trends in political shifts, and the ability to influence actual effect changes in government policies through innovation.
Job Description:
This role may suit an individual who is a specialist in comprehensive open source compliance. Inventorying current applications, including programming languages and distribution methods. Determining which products/software and services pose the highest risk of legal liability - this will differ depending on the syndicate members, but, broadly: Focus on mobile and on-prem applications, for on-prem, prioritize products. Pay particular attention to images and virtual machines. Create open source policies for these products/software and services and implement those policies in our scanning tool.
WHAT ARE WE LOOKING FOR?
5+ years extensive experience in permissive licenses, public domain dedication, corporate-style permissive licenses.
High level experience in sampling policy for distributed commercial licensed products.
Hands-on setting up policies on very sophisticated software/products scanning tools physically distributed.
The ability to encode these policies into a tool. The tool will flag up things that violate a particular policy.
DUTIES, RESPONSIBILITIES AND MANAGEMENT RELATIONSHIPS:
Name one person responsible for managing the scanning tools and integrating it across the
Bullisher
organization (do not decentralize this function).
Commit to a regular schedule of looking at scanning reports and publishing open source attributions reports (embedding in development processes).
Integrate our scanning tool with a ticketing tool like
JIRA .
Configure our scanning tool to auto-approve.
It’s very important for you to find an engineering partner within the organization structure who’s going to help legal action to run the compliance process, who has a big bird eye view over the company e.g.
CTO .
It’s important to publish attribution reports and have source codes ready for every release we do.
The scanning tools should have strong policy enforcement automation and function as knowledge management.
Use our general counsel/compliance to look at the result of a policy system flag up that isn’t auto-approved.
E.g.
AGPL .
Source code of the relevant product to confirm the correct licenses have been identified.
Approved/deny decisions should take into account risk tolerance that underlies the open source policies.
Implement policies for security and engineers to separately review tickets; this should be built into the ticketing workflow.
Create packaging attribution files.
Prepare a source code for engineers should they create a tarball
(including modifications)
for all open source used in the product/software.
Manage the continuous cycle of the open source process of the sophisticated application/platform.
Maintain compliance continuity to require OSS scanning tool integration for new repos and new products/software within the company
(this can be technical or procedural in nature) .
Anytime we are creating a product/repos you have to go through the process of integrating it with our open source scanning tools.
KEY REQUIREMENTS:
Hands-on with Open Source licenses e.g.
(BDS, Apache 2.0, MIT, XLL, OpenSSL, SSLeay, LGPL, GPL, W3C, BOOST, Mozilla Public License, Eclipse Public License, Common Development and Distribution License, Common Public License, Netscape Public License, IBM Public License, Microsoft Limited Public Licenses, etc.)
Technical abilities with multiple programming languages such as C++, Python, JavaScript, or Java.
Executive level experience with automated build tools, version control systems, and artifact repositories such as Jenkins, Git, Perforce, Docker, Maven, and Gradle.
Master's degree in Computer Science/Engineering or equivalent.
INTERVIEW PROCESS:
STAGE 1: COGNITIVE ABILITY TEST
STAGE 2: COGNITIVE ASSESSMENT SCREENING: WITH A 30 YRS+ EXPERIENCE PSYCHOLOGIST
STAGE 3: PRE-SCREENING (VERIFICATION CHECKS & SECURITY CLEARANCE)
STAGE 4: INTERVIEW WITH THE: CEO, CTO & GC
#J-18808-Ljbffr
