1 to 25 of 28 SBOM Jobs in London

Kubernetes, CI/CD, git integrations and build tools Hands-on experience with AppSec tools (part or all) such as: SCA/SAST/SBOM Management/Container Security Ability to build software pipelines with various DevOps tools Hands-on experience with cloud infrastructures - AWS/Azure/GCP - Mandatory ...

products in production Design and implement supply chain security controls across build and deployment pipelines, including artefact signing, provenance, dynamic admission controls and SBOM generation Requirements Strong engineering background, with experience building and shipping production systems Proven track record of building and scaling security programs Fluency in at least ...

Tekton a plusCloud (K8s and/or GCP) expertiseNice to haveUnderstanding of security concerns and frameworks such as SLSA and ensuring provenance of the SBOM a plusProven communication and influencing skills, experience coaching and mentoring a plusOtherLanguagesEnglish: B2 Upper IntermediateSeniorityLeadLondon, United Kingdom of Great Britain and Northern IrelandReq. VR-124421Other ...

Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you’ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion ...

Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion ...

Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you’ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion ...

advanced SIEM correlation rules, custom data parsers, and detection logic to significantly minimize alert fatigue for the SOC team. Architect the end-to-end SBOM lifecycle to continuously track, analyze, and mitigate open-source and third-party software supply chain risks. Design a risk-based vulnerability management platform that automatically ...

advanced SIEM correlation rules, custom data parsers, and detection logic to significantly minimize alert fatigue for the SOC team. Architect the end-to-end SBOM lifecycle to continuously track, analyze, and mitigate open-source and third-party software supply chain risks. Design a risk-based vulnerability management platform that automatically ...

helping build secure, resilient products and platforms for the future. What you'll be doing: Defineandevolvesecuresoftwaredevelopmentstandards,guardrailsandgovernancepractices. Partnerwithengineeringandproductteamstoembedsecurityintodevelopmentlifecyclesanddeliveryprocesses. Improvevisibilityandmanagementofsoftwaresecurityrisks,includingvulnerabilities,insecurecodingtrendsanddependencyrisks. Strengthengovernanceofsoftwaresupplychains,open-sourcedependenciesandSoftwareBillofMaterials(SBOM)practices. SupportthedevelopmentofsecureCI/CDpipelinesthroughcontrolssuchascodescanning,secretsdetectionandreleasegovernance. HelpshapeWPP'sapproachtosecuringAI-enabledapplications,includingareassuchaspromptinjectionresilience,agentcontrolsanddataprotection. Provideinsight,reportingandchallengetoensuresoftwaresecurityrisksareunderstood,prioritisedandeffectivelymanaged. Drivecontinuousimprovementsinsoftwaresecuritymaturityacrosstheorganisation. What you'll need: Experienceinapplicationsecurity,softwaresecurity,DevSecOps,softwareassuranceortechnicalsecuritygovernance. StrongunderstandingofSecureSDLC,applicationsecurityandmodernsoftwaredevelopmentpractices. KnowledgeofCI ...

protect them from advanced threats. Key ResponsibilitiesAugment the complete vulnerability management lifecycle to prioritize AI-centric risks, including supply chain attacks using tools for SBOM tracking, and targeting critical unpatched legacy infrastructure. Design, deploy, and operationalize AI Detection and Response (AIDR) solutions to protect proprietary models and systems from novel ...

safety relationship is a plus Understanding of embedded product environments including ECUs, CAN, J1939, and diagnostics such as UDS is a plus Familiarity with SBOM concepts and their role in vulnerability monitoring and compliance evidence is a plus Self‐motivated, analytical, and pragmatic, with strong interpersonal skills and a collaborative ...

into environments with zero internet connectivity. Enforce Software Supply Chain Security: Implement cryptographic signing (e.g., Sigstore/Cosign, SLSA provenance), Software Bill of Materials (SBOM) generation, and automated vulnerability gating across all build pipelines. Automate Infrastructure-as-Code (IaC): Maintain release-side IaC and GitOps delivery frameworks (ArgoCD, Flux, Terraform … premise, edge, or air-gapped systems). Supply Chain Security Fluency: Solid understanding of build integrity concepts, artifact signing, provenance tracking, vulnerability scanning, and SBOM standards. CI/CD & GitOps Mastery: Proven experience designing enterprise pipelines (GitHub Actions, GitLab CI, Tekton, ArgoCD) with robust testing, canary/blue-green strategies ...

Endpoint vulnerability scanning, vulnerability intelligence, AppSec vulnerability management, vulnerability management of cloud native workloads, external attack surface management Experience with Software Bill of Materials (SBOM) management, specifically ingesting and correlating standard formats Benefits 25 days holiday (plus take your public holiday allowance whenever works best for you) An extra ...

/CD delivery pipelines Implementing container, IaC, secrets and software composition scanning Building software supply chain security controls including image signing, verification and SBOM generation Developing Policy-as-Code controls using OPA, Rego, Kyverno or similar technologies Securing and hardening EKS environments through RBAC, Network Policies and Admission Controllers Supporting … Service Mesh security AWS Private CA and IAM Roles Anywhere Harness CI/CD OPA, Gatekeeper, Kyverno or OSCAL Sigstore, Cosign, SLSA and SBOM tooling Internal Developer Platform (IDP) security AWS Security Specialty, CKS, CISSP or equivalent certifications Experience within regulated financial services environments Why Apply? This is an opportunity ...

/CD delivery pipelines Implementing container, IaC, secrets and software composition scanning Building software supply chain security controls including image signing, verification and SBOM generation Developing Policy-as-Code controls using OPA, Rego, Kyverno or similar technologies Securing and hardening EKS environments through RBAC, Network Policies and Admission Controllers Supporting … Service Mesh security AWS Private CA and IAM Roles Anywhere Harness CI/CD OPA, Gatekeeper, Kyverno or OSCAL Sigstore, Cosign, SLSA and SBOM tooling Internal Developer Platform (IDP) security AWS Security Specialty, CKS, CISSP or equivalent certifications Experience within regulated financial services environments Why Apply? This is an opportunity ...

/CD delivery pipelines Implementing container, IaC, secrets and software composition scanning Building software supply chain security controls including image signing, verification and SBOM generation Developing Policy-as-Code controls using OPA, Rego, Kyverno or similar technologies Securing and hardening EKS environments through RBAC, Network Policies and Admission Controllers Supporting … Service Mesh security AWS Private CA and IAM Roles Anywhere Harness CI/CD OPA, Gatekeeper, Kyverno or OSCAL Sigstore, Cosign, SLSA and SBOM tooling Internal Developer Platform (IDP) security AWS Security Specialty, CKS, CISSP or equivalent certifications Experience within regulated financial services environments Why Apply? This is an opportunity ...

prevent malware from entering the network, which provides us a unique opportunity to help build this inventory. Our team is responsible for: Providing SBOM tooling and helping integrate it into our supply chain Working across ecosystems to optimize our tooling for the best quality results Controlling and tracking the ingress ...

scalable security capabilities integrated into engineering workflows Embed security into the software development lifecycle by implementing automated controls Improve software supply chain security through SBOM generation and dependency visibility Analyze and enrich vulnerability data with contextual information for effective remediation Provide actionable insights and guidance to engineering teams to address … security, DevSecOps, or engineering‐led security teams Familiarity with security tools such as Snyk and Wiz Knowledge of software supply chain security concepts, including SBOM, SLSA, and dependency management Cloud certifications, preferably GCP (e.g., Professional Cloud Architect, Professional DevOps Engineer) Experience operating in large‐scale enterprise environments within regulated industries ...

operate scalable security capabilities integrated into engineering workflowsEmbed security into the software development lifecycle by implementing automated controlsImprove software supply chain security through SBOM generation and dependency visibilityAnalyze and enrich vulnerability data with contextual information for effective remediationProvide actionable insights and guidance to engineering teams to address security issuesCollaborate with … platform security, DevSecOps, or engineering-led security teamsFamiliarity with security tools such as Snyk and WizKnowledge of software supply chain security concepts, including SBOM, SLSA, and dependency managementCloud certifications, preferably GCP (e.g., Professional Cloud Architect, Professional DevOps Engineer)Experience operating in large-scale enterprise environments within regulated industriesAbility to communicate ...

security outcomes. Responsibilities Vulnerability Discovery & Triage Scan Azure and GCP infrastructure for known vulnerabilities using Datadog, Sentinel, or equivalent tooling. Integrate with SCA/SBOM tools such as Snyk for dependency scanning. Prioritise vulnerabilities based on CVSS score, exploitability, and business impact. Maintain a live vulnerability register and risk dashboard. … container security and vulnerability scanning. Security & Compliance Knowledge of DORA, FCA, and SOC2 requirements. Understanding of patch management and change control processes. Experience with SBOM and Software Composition Analysis (SCA) tooling. Comfortable working in a fast-paced, regulated environment. ...

DevSecOps & Governance - Outside IR35 - rate negotiable - remote UK - Start date mid October - Must have active SC clearance An opportunity has arisen for an experienced DevSecOps & Governance Architect to play a key role in shaping secure ...

Outside IR35 - 6 month Contract - Rates Negotiable - Active SC Clearance required Our client is looking for a Python/Platform Engineer to build secure, reliable and easy-to-use platform capabilities for development teams. Youll ...

Python Platform Engineer - Outside IR35 - 6 month Contract - Rates Negotiable - Active SC Clearance required - Start date mid October Our client is looking for a Python/Platform Engineer to build secure, reliable and easy-to ...

SC Cleared Software Engineer Initial 5-month Contract Fully Remote £400 - £575 p/day, Inside IR35 We're recruiting for a Software Engineer to support the development and improvement of secure, python solutions. This ...

SC Cleared Software Engineer Initial 5-month Contract Fully Remote £400 - £575 p/day, Inside IR35 We're recruiting for a Software Engineer to support the development and improvement of secure, python solutions. This ...