Skip to content

Open nowPosted today

Master Thesis Work - Industrializing e-SBOM Traceability across DevOps, Windchill and Product Lifecycle Systems

A.B.B.2,238 open roles

Where
Malmo, Skane County, Sweden
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowMaster Thesis Work - Industrializing e-SBOM Traceability across DevOps, Windchill and Product Lifecycle SystemsA.B.B. · Malmo, Skane County, Sweden
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on A.B.B.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. A.B.B. postings stay open a median of 18 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted today

A.B.B. median: 18 days open

The posting

At ABB, we help industries outrun - leaner and cleaner. Here, progress is an expectation - for you, your team, and the world. As a global market leader, we’ll give you what you need to make it happen. It won’t always be easy, growing takes grit. But at ABB, you’ll never run alone. Run what runs the world.

This Position reports to:

R&D Global Unit Lead

Your role and responsibilities

Execution of this Thesis work will be done within ABB Automation PCP, a unit within ABB’s business area Process Automation. Automation PCP develops automation products - hardware and software - for monitoring, process control and optimization. We have automation products for all kind of industries.

Within Automation PCP, we would like to continue the previous master's thesis on extended Software Bills of Materials (e-SBOMs) by moving from a successful proof of concept toward an industrially usable, governed, and maintainable solution. The work should investigate how artifact-centric e-SBOM information can be generated, exchanged, aggregated, baselined, and traced across the software lifecycle and across ABB engineering systems.

Details:

• Period: TBD

• Number of credits: 30 ECTS

• Number of students for this thesis work: 1 or 2

• Location: Mostly on site - Malmo, Sweden

The thesis will investigate an architecture in which development environments and CI/CD pipelines generate controlled e-SBOM metadata for exact artifact versions, while product-lifecycle, release, and vulnerability-management systems consume appropriate views of that information. The study should use ABB System 800xA as the main case, but the proposed principles and interfaces should be generic enough for reuse by other ABB products and customer systems.

The work should explicitly address integration and governance boundaries among systems such as Azure DevOps, Windchill, Dependency-Track, source repositories, artifact repositories, and approved release-documentation or archive locations. A key topic is how to avoid uncontrolled duplication while preserving authoritative ownership, immutable release evidence, product-level traceability, and continuously updated vulnerability information.

A proof-of-concept implementation is expected. It should use e.g. scripts and REST APIs to demonstrate a representative flow from a controlled build artifact to an e-SBOM, aggregation or transformation, validation, and publication or registration in a downstream system. The proof of concept should include automated checks and readable output for both tools and human reviewers.

Research questions to consider as input:

• How can an artifact-centric e-SBOM information model extend standard SBOM data without duplicating information already governed in other systems?

• How should identity, version, revision, dependency, lifecycle state, provenance, build information, test evidence, requirements, and product or release relationships be represented and validated?

• Which system should be authoritative for each data element, and how should conflicting or superseded information be detected and resolved?

• How can e-SBOMs be generated and aggregated automatically across component, product, and system levels while detecting missing references, cycles, incompatible versions, and unresolved dependencies?

• How should Windchill, Dependency-Track, Azure DevOps, and archive-safe release documentation exchange information while separating released baselines from changing vulnerability-monitoring views?

• What measurable benefits and limitations does the proposed solution provide for traceability, impact analysis, reproducibility, lifecycle management, compliance evidence, and configuration status accounting?

Expected result:

The expected result is a master's-level thesis containing a literature and standards review, stakeholder and requirements analysis, a documented logical architecture and information model, a working proof of concept, and an evaluation using representative ABB use cases. The report should provide implementable recommendations, known limitations, security and maintenance considerations, and a roadmap from proof of concept to production use.

Qualifications for the role

  • ABB are looking for students for a thesis work at master’s degree level in Software Engineering, Computer Science, Information Systems, Industrial Engineering, or a related field.
  • ABB are looking for students in the education phase where a thesis project is needed to finalize the education.
  • You have at least a basic understanding of configuration management, including configuration items, identification, baselines, versioning, change control, status accounting, and traceability.
  • You understand DevOps and CI/CD concepts and have practical experience with scripting and REST APIs, for example using Python or PowerShell.
  • You have general knowledge of Software Bills of Materials (SBOMs), software dependencies, software supply-chain information, and lifecycle traceability.
  • You can work analytically with information distributed across tools and can evaluate both technical solutions and governance aspects such as data ownership, authoritative sources, maintainability, and auditability.
  • English is ABB's defined corporate language. Understanding Swedish will simplify collaboration but is not mandatory.

More about us

We value people from different backgrounds. Apply today for your next career step within ABB and visit www.abb.com to learn about the impact of our solutions across the globe. #MyABBStory

Recruiting Manager Ali Houmani, +46 72 461 43 24. For technical thesis related questions please contact Christer Wibom, +46 761369496.

Positions are filled continuously. Please apply with your CV, academic transcripts, and a cover letter in English.

We look forward to receiving your application!

A future opportunity

This role is part of our talent pipeline, which means it’s not currently open, but we’re always looking for curious minds, bold thinkers, and people who want to make an impact.

Click Apply to express your interest and be considered for future opportunities that match your experience and aspirations.

At ABB, we welcome people from all backgrounds and believe that diverse perspectives help us build a cleaner, smarter future.

Apply today or visit https://www.abb.com to learn more about how we help run what runs the world.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against A.B.B.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on A.B.B.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    A.B.B.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.