5 of 5 SLSA Jobs in England

Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams. Core Responsibilities : Design and maintain Groovy pipeline steps (build, test, package, scan, deploy). Extend Python tooling … for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modelling). Refactor Legacy scripts (remove global state ...

leaders on safe scaling patterns and reuse. Preferred qualifications, capabilities, and skills Advanced knowledge of CI/CD, application resiliency, and secure delivery (e.g., SLSA framework and GitOps). Deep experience with Observability and Monitoring tools (e.g., Prometheus, Grafana, OTEL). Expertise in performance optimisation of distributed systems (e.g., caching ...

leaders on safe scaling patterns and reuse. Preferred qualifications, capabilities, and skills Advanced knowledge of CI/CD, application resiliency, and secure delivery (e.g., SLSA framework and GitOps). Deep experience with Observability and Monitoring tools (e.g., Prometheus, Grafana, OTEL). Expertise in performance optimisation of distributed systems (e.g., caching ...

program. Lead Security roadmap: DevSecOps, policy‐as‐code controls, risk‐based CI/CD gates. Govern supply‐chain security: artefact signing, SBOMs, provenance; adopt SLSA‐style controls. Reduced lead time to secure release; zero‐critical promotion checkpoints; supplier onboarding efficiency; executive risk communication. Mentor juniors Experience & Qualifications 5+ years ...

DevSecOps, or engineering-led security teams Familiarity with security tools such as Snyk and Wiz Knowledge of software supply chain security concepts, including SBOM, SLSA, and dependency management Cloud certifications, preferably GCP (e.g., Professional Cloud Architect, Professional DevOps Engineer) Experience operating in large-scale enterprise environments within regulated industries Ability ...