13 of 13 Permanent SLSA Jobs in the UK

chaos and resilience tooling Security: SonarQube, Snyk, Checkmarx, Veracode, Trivy, secrets management (HashiCorp Vault, cloud-native equivalents), OPA/policy-as-code, SBOM and SLSA concepts. Platform: Kubernetes, containers, Terraform, service mesh, observability stacks AI/ML: MLOps and LLMOps tooling, model registries, vector stores and retrieval architectures, evaluation frameworks ...

identity, secrets management, policy as code (e.g., Kyverno or OPA Gatekeeper), image signing and SBOMs (e.g., Sigstore/cosign), vulnerability scanning, and alignment with SLSA and the NIST Secure Software Development Framework. Resilience and recovery: Design for high availability across zones and sites. Own backup, restore, and disaster-recovery procedures ...

binary bundles) capable of deploying seamlessly into environments with zero internet connectivity. Enforce Software Supply Chain Security: Implement cryptographic signing (e.g., Sigstore/Cosign, SLSA provenance), Software Bill of Materials (SBOM) generation, and automated vulnerability gating across all build pipelines. Automate Infrastructure-as-Code (IaC): Maintain release-side ...

Python, Bash, or similar. Desirable Skills/Experience Familiarity with AI code generation tools and their security implications. Experience with supply chain security (SBOM, SLSA). CSSLP or equivalent certification. Deliver No PerformanceParameter Measure 1 Customer centricity Timely security breach solutioning to end users, Internal stakeholders & external customers experience, CSAT ...

platform environments. Microsoft Defender XDR suite. Building or transforming SOC functions. Threat hunting and purple team exercises. Supply chain security, SBOM, Sigstore, Cosign or SLSA frameworks. Policy as Code solutions such as OPA or Kyverno. Previous software engineering, platform engineering or infrastructure background. Certifications (Desirable) Certifications are advantageous but practical ...

technical leaders on safe scaling patterns and reuse. Preferred qualifications, capabilities, and skills Advanced knowledge ofCI/CD, application resiliency, and secure delivery (e.g., SLSA framework and GitOps). Deep experience with Observability and Monitoring tools (e.g., Prometheus, Grafana, OTEL). Expertise in performance optimisation of distributed systems (e.g., caching ...

Atomic Red Team, and hunting programmes that produced new detections. Supply chain security in depth: SBOM (CycloneDX or SPDX), Sigstore or cosign, and SLSA provenance. Policy as code with OPA or Kyverno. A background as a software or platform engineer before moving into security. Qualifications and certifications: Certifications ...

cross-team collaboration. Hands‐on Security Engineering experience. Preferred qualifications, capabilities, and skills Advanced knowledge ofCI/CD, application resiliency, and secure delivery (e.g., SLSA framework and GitOps). Deep experience with Observability and Monitoring tools (e.g., Prometheus, Grafana, OTEL). Expertise in performance optimisation of distributed systems (e.g., caching ...

platform A background in software engineering prior to moving into security Software supply chain security experience, such as Supply-chain Levels for Software Artifacts (SLSA), SBOMs or artefact signing Container and Kubernetes security experience, including image scanning and admission controls Experience with policy-as-code tooling Experience establishing a security ...

Systematically, consistently and automatically capture the risk exposure of Chainguards products. Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore/Cosign). Proactively identify emerging customer security needs, and build solutions to meet these. Lead security architecture reviews and threat models for Kubernetes … . Fluency with container security: image scanning, distroless/minimal base images, runtime security. Experience with software supply chain security tooling and frameworks (Sigstore, SLSA, SBOM generation). Solid understanding of OWASP, NIST, and cloud security frameworks and how to apply them pragmatically. If using AI for your resume ...

accepting provenance and attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc). Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic … integrity and evaluates attestation data against configurable customer trust policies — SLSA level requirements, allowed builder identities, key material, and more. Expose: Deliver clean, well-documented APIs that make provenance data useful to customers and to other parts of the platform — queryable, auditable, and reliable. Collaborate: Work closely with product, customer ...

accepting provenance and attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc). Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic … integrity and evaluates attestation data against configurable customer trust policies — SLSA level requirements, allowed builder identities, key material, and more. Expose: Deliver clean, well-documented APIs that make provenance data useful to customers and to other parts of the platform — queryable, auditable, and reliable. Collaborate: Work closely with product, customer ...

Lead Software Engineer - Linux Platform Validation Engineer LONDON, United Kingdom Job Information Job Identification 210800899 Job Category Software Engineering Business Unit Corporate Sector Posting Date 10/16/2026, 02:50 PM Locations 4 ...