22 of 22 SBOM Jobs in London

service virtualisation and greater automation across complex engineering environments. Embed automated security controls including SAST, DAST, SCA, container/IaC scanning, secrets detection and SBOM generation into delivery pipelines. Establish policy-as-code, software supply chain security and automated compliance evidence, reducing manual controls and improving auditability. Define architecture ...

experience strongly preferred. You've designed CI/CD pipelines from scratch and implemented DevSecOps controls yourself, including secrets detection, dependency and container scanning, SBOM generation, and software supply-chain security. You use Python or Bash regularly and can demonstrate tooling you've developed and maintained. You understand observability, incident ...

/CD, Git integrations, and build tools Hands-on experience with application security, including Software Composition Analysis (SCA), code security, Software Bills of Materials (SBOM), or container security Experience building and managing software delivery pipelines using common development and DevOps tools Practical experience with at least one major cloud platform ...

/CD, Git integrations, and build tools Hands-on experience with application security, including Software Composition Analysis (SCA), code security, Software Bills of Materials (SBOM), or container security Experience building and managing software delivery pipelines using common development and DevOps tools Practical experience with at least one major cloud platform ...

traceability, and auditable artifact promotion across environments. integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines. enable SBOM generation and validation, artifact signing, provenance verification and integrity controls. reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation. partner ...

cloud and SaaS security best practices: least privilege, managed identities, secret management, network security, private endpoints, and secure software supply chain practices (image scanning, SBOM, dependency governance). Awareness of compliance, data residency and multi‐region considerations in multi‐tenant Azure environments. Technical leadership and communication Ability to run proofs ...

traceability, and auditable artifact promotion across environments. Integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines. Enable SBOM generation and validation, artifact signing, provenance verification and integrity controls. Reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation. Partner ...

modern SDLC practices, Agile, DevOps, SRE, DevSecOps, CI/CD, infrastructure as code and automated testing. Experience implementing secure engineering controls, including SAST, SCA, SBOM and OWASP principles, alongside observability and DORA metrics. Excellent technical leadership, communication and stakeholder management skills, with the confidence to influence across multiple teams without ...

supply chain. In an environment that relies heavily on automated coding agents, build systems that establish the provenance of code and dependencies: robust signing, SBOM generation (Sigstore, cosign), dependency and container scanning (Snyk, Trivy), and automated vulnerability management. Define agent sandboxing and least-privilege execution. Set and enforce the security … expect to run: model registries (MLflow, Weights & Biases); container and dependency scanners (Snyk, Trivy); policy-as-code (OPA); supply-chain tooling (Sigstore, cosign); and SBOM generators. Experience with model-weight handling and the classification of sensitive or dual-use research artefacts. A background that combines infrastructure engineering with security, from ...

platform engineering tools such as Crossplane for managing cloud infrastructure through Kubernetes Knowledge of software supply chain security concepts including software bill of materials (SBOM) and dependency governance Awareness of multi-region cloud architectures and their implications for consistent guardrails, compliance, and data residency Familiarity with the UK regulatory environment ...

into environments with zero internet connectivity. Enforce Software Supply Chain Security: Implement cryptographic signing (e.g., Sigstore/Cosign, SLSA provenance), Software Bill of Materials (SBOM) generation, and automated vulnerability gating across all build pipelines. Automate Infrastructure-as-Code (IaC): Maintain release-side IaC and GitOps delivery frameworks (ArgoCD, Flux, Terraform … premise, edge, or air-gapped systems). Supply Chain Security Fluency: Solid understanding of build integrity concepts, artifact signing, provenance tracking, vulnerability scanning, and SBOM standards. CI/CD & GitOps Mastery: Proven experience designing enterprise pipelines (GitHub Actions, GitLab CI, Tekton, ArgoCD) with robust testing, canary/blue-green strategies ...

reduce dependency on scarce integrated environments. Security integration: Embed security controls into the pipeline: SAST, DAST, SCA, container and IaC scanning, secrets detection, and SBOM generation. Design the software supply chain security model — artefact provenance, signing, dependency governance, base image hardening. Define policy-as-code and automated control evidence …/k6, chaos and resilience tooling Security: SonarQube, Snyk, Checkmarx, Veracode, Trivy, secrets management (HashiCorp Vault, cloud-native equivalents), OPA/policy-as-code, SBOM and SLSA concepts. Platform: Kubernetes, containers, Terraform, service mesh, observability stacks AI/ML: MLOps and LLMOps tooling, model registries, vector stores and retrieval architectures ...

Role: Full Stack Senior Developer Location: London Salary: Competitive salary and package dependant on experience Career Level: Manager (CL7) Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance, which ...

prevent malware from entering the network, which provides us a unique opportunity to help build this inventory. Our team is responsible for: Providing SBOM tooling and helping integrate it into our supply chain Working across ecosystems to optimize our tooling for the best quality results Controlling and tracking the ingress ...

platforms, from first design to live operations across all our CI/CD pipelines Define our secure development standards and wire SAST, DAST and SBOM tooling into how we ship. Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure. Design our security testing … Azure, and other global hyperscalers. You've secured backend services at real scale and depth of complexity. Command of the secure SDLC: SAST, DAST, SBOM and the judgement to know which findings matter. Experience applying AI or LLMs to security: simulating threats, probing defences, building countermeasures. Solid cryptography and identity ...

Senior Application Security Engineer - Product Security & DevSecOps 27 Goswell Rd., Barbican, London EC1M 7AN About Us Duco is on a mission to reduce the time spent on data-related work by 90%. Our enterprise ...

role in London. You will engineer and operate enterprise repositories and implement secure SDLC practices across environments. The team focuses on open-source governance, SBOM generation, and automated security gates within CI/CD, collaborating with security, architecture, and risk teams globally. #J-18808-Ljbffr ...

build outputs. You will define standards for repository structure, retention, and auditable artifact promotion across environments. The role involves integrating software composition analysis, SBOM generation, artifact signing, and automated security gates into CI/CD, and reducing supply-chain #J-18808-Ljbffr ...

Make Your Mark as an Principal Product Security Engineer at Storio group About the role. You will be based in our London office, where you will help shape how security is built into our ecommerce ...

Lead Software Engineer - Linux Platform Validation Engineer LONDON, United Kingdom Job Information Job Identification 210800899 Job Category Software Engineering Business Unit Corporate Sector Posting Date 10/16/2026, 02:50 PM Locations 4 ...

Our client is a leading global investment bank. JOB DESCRIPTION Drive quality, compatibility, and release readiness for hardened RHEL platforms through automated testing, integration validation, and modern engineering practices across virtualized and containerized environments. About ...

Principal Product Security Engineer Department: CISO Employment Type: Permanent - Full Time Location: UK - London Reporting To: CISO Description At CFC, technology is at the heart of everything we do. We are looking for a Principal ...