2 of 2 Contract SBOM Jobs in the UK excluding London

code - Ensure every pipeline has push protection, SAST/SCA/DAST, IaC scanning, and secure defaults; implement WAF requirements for external endpoints; maintain SBOM/pipeline attestations where applicable. Release linked observability - Instrument services with deployment annotations, commit build deploy traceability, golden signals and SLO/error budget alerts ...

techniques such as canary releases, blue/green deployments, and automated rollback Solid grasp of secure-by-design practices: SAST, SCA, DAST, IaC scanning, SBOM, WAF configuration, and pipeline attestations Experience building and managing ephemeral, production-like environments with data-on-demand capability Strong observability skills - tracing, metrics, logs ...