4 of 4 SBOM Jobs in the East of England

tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing ...

Experience evaluating, procuring, and governing AI, machine learning, and emerging technology solutions. Regulatory Acumen Strong understanding of global software compliance standards, open-source licensing (SBOM/SBOA), cybersecurity regulations, and regulatory frameworks such as the Cyber Resilience Act (CRA). Leadership & Influence Outstanding cross-functional leadership skills with a proven ...

Implement and operate automated security testing within those pipelines, including static analysis (SAST), dependency analysis (SCA), secret detection, dynamic testing (DAST), vulnerability scanning and SBOM generation, with quality gates and clear, consolidated reporting. Vulnerability Management: Triage scanner findings and newly published CVEs with the development teams, assess their real impact … another regulated sector. Security Tooling: Experience with tools such as OWASP ZAP, OWASP Dependency-Check, Trivy, Semgrep, SonarQube, Nessus or OpenSCAP, and with SBOM formats (CycloneDX, SPDX). Infrastructure: Experience with Terraform or Ansible, virtualization platforms (e.g. Proxmox, VMware), self-hosted CI runners and AWS. Windows Build Environments: Experience with ...

Motorola Solutions UK Limited is seeking a hands-on DevSecOps Engineer to strengthen our CI/CD pipelines across embedded Linux, Windows desktop, and web products. You will drive security into every release, implement automated ...