2 of 2 SBOM Jobs in the Thames Valley

functionality you develop Experience with interacting with backend APIs (REST, Websocket) An understanding of secure software development and maintaining software with a complex SBOM Great written and spoken English, including the ability to learn about and discuss complex architectures with other developers A basic foundational understanding of the networking protocols ...

Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact signing and verification, dependency and base image policy, and the move from long‐lived pipeline secrets to OIDC federation. Harden … small team. Detection validation with purple teaming or Atomic Red Team, and hunting programmes that produced new detections. Supply chain security in depth: SBOM (CycloneDX or SPDX), Sigstore or cosign, and SLSA provenance. Policy as code with OPA or Kyverno. A background as a software or platform engineer before moving ...