# Master Thesis Work - Industrializing e-SBOM Traceability across DevOps, Windchill and Product Lifecycle Systems at ABB

ABB is hiring a Master Thesis Work - Industrializing e-SBOM Traceability across DevOps, Windchill and Product Lifecycle Systems in Malmö, Sweden. Level rates it Little AI ●○○○; you can [apply on ABB](https://jobsbylevel.com/go/57f14fa6-ed21-4b24-be43-5debaa4a0415?utm_medium=ai-agent).

AI Level 1, AI centrality 0 out of 100. Malmo, Skane County, Sweden.

## Details

- Company: [ABB](https://jobsbylevel.com/companies/abb)
- AI level: AI Level 1 (score 0 out of 100)
- Location: Malmo, Skane County, Sweden
- Posted: November 11, 2026
- Apply: https://jobsbylevel.com/go/57f14fa6-ed21-4b24-be43-5debaa4a0415?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems-at-abb-63e6c2

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems-at-abb-63e6c2

## Description

At ABB, we help industries outrun - leaner and cleaner. Here, progress is an expectation - for you, your team, and the world. As a global market leader, we’ll give you what you need to make it happen. It won’t always be easy, growing takes grit. But at ABB, you’ll never run alone. Run what runs the world. This Position reports to: R&D Global Unit Lead Your role and responsibilities Execution of this Thesis work will be done within ABB Automation PCP, a unit within ABB’s business area Process Automation. Automation PCP develops automation products - hardware and software - for monitoring, process control and optimization. We have automation products for all kind of industries. Within Automation PCP, we would like to continue the previous master's thesis on extended Software Bills of Materials (e-SBOMs) by moving from a successful proof of concept toward an industrially usable, governed, and maintainable solution. The work should investigate how artifact-centric e-SBOM information can be generated, exchanged, aggregated, baselined, and traced across the software lifecycle and across ABB engineering systems. Details: • Period: TBD • Number of credits: 30 ECTS • Number of students for this thesis work: 1 or 2 • Location: Mostly on site - Malmo, Sweden The thesis will investigate an architecture in which development environments and CI/CD pipelines generate controlled e-SBOM metadata for exact artifact versions, while product-lifecycle, release, and vulnerability-management systems consume appropriate views of that information. The study should use ABB System 800xA as the main case, but the proposed principles and interfaces should be generic enough for reuse by other ABB products and customer systems. The work should explicitly address integration and governance boundaries among systems such as Azure DevOps, Windchill, Dependency-Track, source repositories, artifact repositories, and approved release-documentation or archive locations. A key topic is how to avoid uncontrolled duplication while preserving authoritative ownership, immutable release evidence, product-level traceability, and continuously updated vulnerability information. A proof-of-concept implementation is expected. It should use e.g. scripts and REST APIs to demonstrate a representative flow from a controlled build artifact to an e-SBOM, aggregation or transformation, validation, and publication or registration in a downstream system. The proof of concept should include automated checks and readable output for both tools and human reviewers. Research questions to consider as input: • How can an artifact-centric e-SBOM information model extend standard SBOM data without duplicating information already governed in other systems? • How should identity, version, revision, dependency, lifecycle state, provenance, build information, test evidence, requirements, and product or release relationships be represented and validated? • Which system should be authoritative for each data element, and how should conflicting or superseded information be detected and resolved? • How can e-SBOMs be generated and aggregated automatically across component, product, and system levels while detecting missing references, cycles, incompatible versions, and unresolved dependencies? • How should Windchill, Dependency-Track, Azure DevOps, and archive-safe release documentation exchange information while separating released baselines from changing vulnerability-monitoring views? • What measurable benefits and limitations does the proposed solution provide for traceability, impact analysis, reproducibility, lifecycle management, compliance evidence, and configuration status accounting? Expected result: The expected result is a master's-level thesis containing a literature and standards review, stakeholder and requirements analysis, a documented logical architecture and information model, a working proof of concept, and an evaluation using representative ABB use cases. The report should provide

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems-at-abb-63e6c2

Source: https://jobsbylevel.com/jobs/master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems-at-abb-63e6c2

## Cite this page

Level. https://jobsbylevel.com/jobs/master-thesis-work-industrializing-e-sbom-traceability-across-devops-windchill-and-product-lifecycle-systems-at-abb-63e6c2.

Get job alerts: https://jobsbylevel.com/newsletter