1 to 25 of 47 Permanent SBOM Jobs in the UK

doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes/container environments Embed SAST, DAST, SCA, SBOM and secret scanning into CI/CD pipelines Perform security code reviews and provide secure coding guidance Define security requirements and support engineering teams with secure ...

bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. A proactive, curious ...

security code reviews and act as a technical SME for engineering and compliance teams. Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines. Apply manual network/application testing, custom scripting, and unit test cases to validate controls. Recommend ...

scripting, APIs, CI/CD pipelines, or specialized tools Experience with threat modeling for SaaS, API, cloud, or on‐prem product components Experience with SBOM generation, dependency visibility, or software supply chain security What we offer Fully remote work environment Opportunity to work on a real security product used ...

Experience with Kubernetes platform engineering and cluster lifecycle management. AWS Certifications at Associate level or above. Experience with security tooling such as SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code. Experience working in high-security or regulated environments. Experience contributing to open-source projects. Experience of using ...

vulnerabilities against OWASP Top 10 and CVSS principles Implementing secrets detection, credential rotation and secure Key Vault practices Strengthening software supply-chain security through SBOM generation, dependency scanning and artefact signing Supporting API security testing, threat modelling and third-party penetration tests Configuring Azure-native security tooling, including Defender ...

misconfiguration, identity exposure, and attack-path analysis using cloud-native tooling (AWS Inspector, GuardDuty, Security Hub, or equivalents). Experience securing software supply chains — SBOM generation, dependency provenance, artifact signing — and integrating this into build pipelines rather than a standalone assurance process. Experience building or shaping security engineering capability within ...

misconfiguration, identity exposure, and attack-path analysis using cloud-native tooling (AWS Inspector, GuardDuty, Security Hub, or equivalents). Experience securing software supply chains — SBOM generation, dependency provenance, artifact signing — and integrating this into build pipelines rather than a standalone assurance process. Experience building or shaping security engineering capability within ...

engineering at production scale: runtime detection, anomaly detection, alert tuning (Sigma, OSQuery, Falco, or equivalent) Supply-chain security: SLSA, sigstore/cosign, in-toto, SBOM tooling used as a real control Cloud-native attack patterns on AWS: IAM privilege analysis, IMDS exploitation, cross-account paths, KMS misuse, and the defences ...

risk tracking through the security case and register. Secure Development & DevSecOpsIntegrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier EngagementSupport V&V, penetration testing ...

tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing ...

Kubernetes, CI/CD, git integrations and build tools Hands-on experience with AppSec tools (part or all) such as: SCA/SAST/SBOM Management/Container Security Ability to build software pipelines with various DevOps tools Hands-on experience with cloud infrastructures - AWS/Azure/GCP - Mandatory ...

delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial but is not essential ...

delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial but is not essential ...

delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial but is not essential ...

cloud and SaaS security best practices: least privilege, managed identities, secret management, network security, private endpoints, and secure software supply chain practices (image scanning, SBOM, dependency governance). Awareness of compliance, data residency and multi‐region considerations in multi‐tenant Azure environments. Technical leadership and communication Ability to run proofs ...

products in production Design and implement supply chain security controls across build and deployment pipelines, including artefact signing, provenance, dynamic admission controls and SBOM generation Requirements Strong engineering background, with experience building and shipping production systems Proven track record of building and scaling security programs Fluency in at least ...

Tekton a plusCloud (K8s and/or GCP) expertiseNice to haveUnderstanding of security concerns and frameworks such as SLSA and ensuring provenance of the SBOM a plusProven communication and influencing skills, experience coaching and mentoring a plusOtherLanguagesEnglish: B2 Upper IntermediateSeniorityLeadLondon, United Kingdom of Great Britain and Northern IrelandReq. VR-124421Other ...

with Docker and Kubernetes Understanding of SQL Server and NoSQL technologies such as Cosmos DB or RavenDB Exposure to secure development practices including SAST, SBOM generation and vulnerability scanning Why join System C? At System C, you'll work alongside talented people who care deeply about making a difference. ...

with Docker and Kubernetes Understanding of SQL Server and NoSQL technologies such as Cosmos DB or RavenDB Exposure to secure development practices including SAST, SBOM generation and vulnerability scanning Why join System C? At System C, you'll work alongside talented people who care deeply about making a difference. ...

with Docker and Kubernetes Understanding of SQL Server and NoSQL technologies such as Cosmos DB or RavenDB Exposure to secure development practices including SAST, SBOM generation and vulnerability scanning At System C, you'll work alongside talented people who care deeply about making a difference. We foster a supportive environment ...

Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you’ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion ...

Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion ...

Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you’ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion ...

advanced SIEM correlation rules, custom data parsers, and detection logic to significantly minimize alert fatigue for the SOC team. Architect the end-to-end SBOM lifecycle to continuously track, analyze, and mitigate open-source and third-party software supply chain risks. Design a risk-based vulnerability management platform that automatically ...