*Barco*
Barco designs technology that makes everyday life a little better. Seeing beyond the image, we develop hardware, software, and service solutions to help you work together, share insights, and wow audiences. Our focus is on three core markets: Enterprise (from meeting and control rooms to corporate spaces), Healthcare (from the radiology department to the operating room), and Entertainment (from movie theaters to live events and attractions). Our solutions make a visible impact, allowing people to enjoy compelling entertainment experiences, to foster knowledge sharing and smart decision-making in organizations and to help hospitals provide their patients with the best possible healthcare. Headquartered in Kortrijk (Belgium), Barco has a global team of 3,000+ employees, whose passion for technology is captured in +500 granted patents.
*The task at hand*
With upcoming regulations, the creation of a Software Bill of Materials (SBOM) will become mandatory to be able to release (software) products to the markets. We can already create SBOM's for our products but cannot yet use them in an effective way (they require (partial) manual analysis). We would like to use our SBOM's to obtain automated CVE reporting by integrating analysis tooling into our pipelines that can upload an SBOM into Dependency-Track, and then make use of the API of Dependency-Track to report on newly found CVE's, as well as generating release reports for when a software version gets released to the public.
Internship Goals
* Create scripts that generate the SBOM on each build and upload it to our Dependency-Track instance
* Write tooling to query the Dependency-Track instance to:
* report any new CVE's with a sufficiently high score back to a group of people (i.e. Jira tickets, mail, Teams message, ...)
* generate/retrieve a report of open CVE's for a given firmware version
Qualifications
* Android knowledge
* Security background
Furthermore, you should be a student in a technical discipline, eligible to work at our HQ in Kortrijk, Belgium.
We are committed to conducting our business activities with the highest standards of integrity, responsibility and compliance across all aspects of our operations. This includes adherence to applicable laws, regulations and internal policies related to ethical conduct, quality standards, cyber security, sustainability, data protection & confidentiality and safety.
D&I Statement
At Barco, innovation drives everything we do. We believe that diversity fuels creativity, bringing us closer to our colleagues and customers. Inclusion and equity aren't just values—they're core capabilities that propel us toward our shared goals and mission.
Read here how we do this