SecOps Engineering Lead
- Location
- Abingdon, England, United Kingdom
Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact signing and verification, dependency and base image policy, and the move from long‐lived pipeline secrets to OIDC federation. Harden … small team. Detection validation with purple teaming or Atomic Red Team, and hunting programmes that produced new detections. Supply chain security in depth: SBOM (CycloneDX or SPDX), Sigstore or cosign, and SLSA provenance. Policy as code with OPA or Kyverno. A background as a software or platform engineer before moving ...