26 to 50 of 51 SBOM Jobs in the UK

Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact signing and verification, dependency and base image policy, and the move from long‐lived pipeline secrets to OIDC federation. Harden … small team. Detection validation with purple teaming or Atomic Red Team, and hunting programmes that produced new detections. Supply chain security in depth: SBOM (CycloneDX or SPDX), Sigstore or cosign, and SLSA provenance. Policy as code with OPA or Kyverno. A background as a software or platform engineer before moving ...

Role: Full Stack Senior Developer Location: London Salary: Competitive salary and package dependant on experience Career Level: Manager (CL7) Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance, which ...

prevent malware from entering the network, which provides us a unique opportunity to help build this inventory. Our team is responsible for: Providing SBOM tooling and helping integrate it into our supply chain Working across ecosystems to optimize our tooling for the best quality results Controlling and tracking the ingress ...

Experience evaluating, procuring, and governing AI, machine learning, and emerging technology solutions. Regulatory Acumen Strong understanding of global software compliance standards, open-source licensing (SBOM/SBOA), cybersecurity regulations, and regulatory frameworks such as the Cyber Resilience Act (CRA). Leadership & Influence Outstanding cross-functional leadership skills with a proven ...

REST for cross-language integration. Performance Optimization : GPU acceleration (CUDA/cuDNN), mixed precision, XLA, profiling. Observability : Metrics, tracing, structured logging, dashboards. Security : SBOM, image signing, role-based access, vulnerability scanning. Preferred Qualifications Experience with ONNX Runtime Training, PyTorch, or hybrid ML architectures. Familiarity with distributed training strategies and multi ...

platforms, from first design to live operations across all our CI/CD pipelines Define our secure development standards and wire SAST, DAST and SBOM tooling into how we ship. Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure. Design our security testing … Azure, and other global hyperscalers. You've secured backend services at real scale and depth of complexity. Command of the secure SDLC: SAST, DAST, SBOM and the judgement to know which findings matter. Experience applying AI or LLMs to security: simulating threats, probing defences, building countermeasures. Solid cryptography and identity ...

Implement and operate automated security testing within those pipelines, including static analysis (SAST), dependency analysis (SCA), secret detection, dynamic testing (DAST), vulnerability scanning and SBOM generation, with quality gates and clear, consolidated reporting. Vulnerability Management: Triage scanner findings and newly published CVEs with the development teams, assess their real impact … another regulated sector. Security Tooling: Experience with tools such as OWASP ZAP, OWASP Dependency-Check, Trivy, Semgrep, SonarQube, Nessus or OpenSCAP, and with SBOM formats (CycloneDX, SPDX). Infrastructure: Experience with Terraform or Ansible, virtualization platforms (e.g. Proxmox, VMware), self-hosted CI runners and AWS. Windows Build Environments: Experience with ...

Senior Application Security Engineer - Product Security & DevSecOps 27 Goswell Rd., Barbican, London EC1M 7AN About Us Duco is on a mission to reduce the time spent on data-related work by 90%. Our enterprise ...

About Docker Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world ...

role in London. You will engineer and operate enterprise repositories and implement secure SDLC practices across environments. The team focuses on open-source governance, SBOM generation, and automated security gates within CI/CD, collaborating with security, architecture, and risk teams globally. #J-18808-Ljbffr ...

build outputs. You will define standards for repository structure, retention, and auditable artifact promotion across environments. The role involves integrating software composition analysis, SBOM generation, artifact signing, and automated security gates into CI/CD, and reducing supply-chain #J-18808-Ljbffr ...

Make Your Mark as an Principal Product Security Engineer at Storio group About the role. You will be based in our London office, where you will help shape how security is built into our ecommerce ...

What You'll Do As a Senior Software Engineer - Security, you will design, build, and operate the security capabilities that protect Radiant's cloud platform and infrastructure. You'll work across identity, access control, secrets ...

What You'll Do As a Principal Software Engineer - Security, you will help set the technical direction for Radiant's security capabilities across the cloud platform and infrastructure, leading the design and delivery of the ...

The Company Modern software runs on open source, and managing the compliance, security, and regulatory complexity that comes with it is one of the biggest problems facing engineering and legal teams today. FOSSA is the ...

attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc). Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic integrity and evaluates … their output. Cryptographic Foundations: Comfortable with signing and verification: key material, ECDSA/RSA, certificate chains, OIDC-based keyless signing flows, and transparency logs. SBOM Formats: Familiarity with CycloneDX and SPDX, and how they are packaged as attestation artifacts. Backend & Platform Engineering Experience: 5+ years of production backend engineering, with ...

Lead Software Engineer - Linux Platform Validation Engineer LONDON, United Kingdom Job Information Job Identification 210800899 Job Category Software Engineering Business Unit Corporate Sector Posting Date 10/16/2026, 02:50 PM Locations 4 ...

Our client is a leading global investment bank. JOB DESCRIPTION Drive quality, compatibility, and release readiness for hardened RHEL platforms through automated testing, integration validation, and modern engineering practices across virtualized and containerized environments. About ...

Principal Product Security Engineer Department: CISO Employment Type: Permanent - Full Time Location: UK - London Reporting To: CISO Description At CFC, technology is at the heart of everything we do. We are looking for a Principal ...

* United Kingdom - Hampshire - Farnborough Why Work at Lenovo We are Lenovo. We do what we say. We own what we do. We WOW our customers. Lenovo is a US$83 billion revenue global technology powerhouse ...

Overview Waters is seeking a Principal IVD Software Engineer to help shape the future of our LCMS Clinical and Diagnostic software portfolio. This is a highly influential individual contributor role suited to an experienced software ...

attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc). Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic integrity and evaluates … their output. Cryptographic Foundations: Comfortable with signing and verification: key material, ECDSA/RSA, certificate chains, OIDC-based keyless signing flows, and transparency logs. SBOM Formats: Familiarity with CycloneDX and SPDX, and how they are packaged as attestation artifacts. Backend & Platform Engineering Experience: 5+ years of production backend engineering, with ...

Chainguard is seeking a deeply technical security engineer to embed in our secure development lifecycle. You will design and maintain secure CI/CD pipelines with gates, enforce supply-chain controls, and harden Kubernetes and ...

multiple engineering teams Strong stakeholder management and communication skills OT/ICS, PLC and HMI experience would be a real plus SAST, SCA and SBOM tooling experience is highly desirable Background in manufacturing, defence, critical infrastructure or other regulated product environments is a bonus You’ll support CRA readiness assessments … define security requirements and engineering gates, help select and implement SBOM tooling, review third‐party components and supplier security, and support customer security questionnaires and regulatory audits, all while helping to build a sustainable Product Security programme. The role is UK remote, with occasional travel to client sites in England. ...

Quality Manager- Manufacturing Operations Bristol About Fractile Fractile was founded in 2022 on the bet that, eventually, the world’s most capable AI systems would be limited in their impact by the time taken to ...