7 of 7 Remote/Hybrid SBOM Jobs in London

/CD, Git integrations, and build tools Hands-on experience with application security, including Software Composition Analysis (SCA), code security, Software Bills of Materials (SBOM), or container security Experience building and managing software delivery pipelines using common development and DevOps tools Practical experience with at least one major cloud platform ...

/CD, Git integrations, and build tools Hands-on experience with application security, including Software Composition Analysis (SCA), code security, Software Bills of Materials (SBOM), or container security Experience building and managing software delivery pipelines using common development and DevOps tools Practical experience with at least one major cloud platform ...

cloud and SaaS security best practices: least privilege, managed identities, secret management, network security, private endpoints, and secure software supply chain practices (image scanning, SBOM, dependency governance). Awareness of compliance, data residency and multi‐region considerations in multi‐tenant Azure environments. Technical leadership and communication Ability to run proofs ...

supply chain. In an environment that relies heavily on automated coding agents, build systems that establish the provenance of code and dependencies: robust signing, SBOM generation (Sigstore, cosign), dependency and container scanning (Snyk, Trivy), and automated vulnerability management. Define agent sandboxing and least-privilege execution. Set and enforce the security … expect to run: model registries (MLflow, Weights & Biases); container and dependency scanners (Snyk, Trivy); policy-as-code (OPA); supply-chain tooling (Sigstore, cosign); and SBOM generators. Experience with model-weight handling and the classification of sensitive or dual-use research artefacts. A background that combines infrastructure engineering with security, from ...

into environments with zero internet connectivity. Enforce Software Supply Chain Security: Implement cryptographic signing (e.g., Sigstore/Cosign, SLSA provenance), Software Bill of Materials (SBOM) generation, and automated vulnerability gating across all build pipelines. Automate Infrastructure-as-Code (IaC): Maintain release-side IaC and GitOps delivery frameworks (ArgoCD, Flux, Terraform … premise, edge, or air-gapped systems). Supply Chain Security Fluency: Solid understanding of build integrity concepts, artifact signing, provenance tracking, vulnerability scanning, and SBOM standards. CI/CD & GitOps Mastery: Proven experience designing enterprise pipelines (GitHub Actions, GitLab CI, Tekton, ArgoCD) with robust testing, canary/blue-green strategies ...

reduce dependency on scarce integrated environments. Security integration: Embed security controls into the pipeline: SAST, DAST, SCA, container and IaC scanning, secrets detection, and SBOM generation. Design the software supply chain security model — artefact provenance, signing, dependency governance, base image hardening. Define policy-as-code and automated control evidence …/k6, chaos and resilience tooling Security: SonarQube, Snyk, Checkmarx, Veracode, Trivy, secrets management (HashiCorp Vault, cloud-native equivalents), OPA/policy-as-code, SBOM and SLSA concepts. Platform: Kubernetes, containers, Terraform, service mesh, observability stacks AI/ML: MLOps and LLMOps tooling, model registries, vector stores and retrieval architectures ...

platforms, from first design to live operations across all our CI/CD pipelines Define our secure development standards and wire SAST, DAST and SBOM tooling into how we ship. Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure. Design our security testing … Azure, and other global hyperscalers. You've secured backend services at real scale and depth of complexity. Command of the secure SDLC: SAST, DAST, SBOM and the judgement to know which findings matter. Experience applying AI or LLMs to security: simulating threats, probing defences, building countermeasures. Solid cryptography and identity ...