2 of 2 Remote/Hybrid SLSA Jobs in England

Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams. Core Responsibilities : Design and maintain Groovy pipeline steps (build, test, package, scan, deploy). Extend Python tooling … for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modelling). Refactor Legacy scripts (remove global state ...

program. Lead Security roadmap: DevSecOps, policy‐as‐code controls, risk‐based CI/CD gates. Govern supply‐chain security: artefact signing, SBOMs, provenance; adopt SLSA‐style controls. Reduced lead time to secure release; zero‐critical promotion checkpoints; supplier onboarding efficiency; executive risk communication. Mentor juniors Experience & Qualifications 5+ years ...