20 of 20 Remote/Hybrid SBOM Jobs in the UK

Fluency with container security: image scanning, distroless/minimal base images, runtime security. Experience with software supply chain security tooling and frameworks (Sigstore, SLSA, SBOM generation). Solid understanding of OWASP, NIST, and cloud security frameworks and how to apply them pragmatically. If using AI for your resume or application ...

/CD, Git integrations, and build tools Hands-on experience with application security, including Software Composition Analysis (SCA), code security, Software Bills of Materials (SBOM), or container security Experience building and managing software delivery pipelines using common development and DevOps tools Practical experience with at least one major cloud platform ...

/CD, Git integrations, and build tools Hands-on experience with application security, including Software Composition Analysis (SCA), code security, Software Bills of Materials (SBOM), or container security Experience building and managing software delivery pipelines using common development and DevOps tools Practical experience with at least one major cloud platform ...

cloud and SaaS security best practices: least privilege, managed identities, secret management, network security, private endpoints, and secure software supply chain practices (image scanning, SBOM, dependency governance). Awareness of compliance, data residency and multi‐region considerations in multi‐tenant Azure environments. Technical leadership and communication Ability to run proofs ...

cloud and SaaS security best practices: least privilege, managed identities, secret management, network security, private endpoints, and secure software supply chain practices (image scanning, SBOM, dependency governance). Awareness of compliance, data residency and multi‐region considerations in multi‐tenant Azure environments. Technical leadership and communication Ability to run proofs ...

experience: Key experience: AI/GenAI security architecture AI coding assistants & Agentic AI DevSecOps/Application Security CI/CD security integration SAST, SCA, SBOM & software supply-chain security AI governance, monitoring & policy enforcement Enterprise security architecture Hands-on PoC delivery GitHub Enterprise/Copilot or similar platforms What ...

experience: Key experience: AI/GenAI security architecture AI coding assistants & Agentic AI DevSecOps/Application Security CI/CD security integration SAST, SCA, SBOM & software supply-chain security AI governance, monitoring & policy enforcement Enterprise security architecture Hands-on PoC delivery GitHub Enterprise/Copilot or similar platforms What ...

supply chain. In an environment that relies heavily on automated coding agents, build systems that establish the provenance of code and dependencies: robust signing, SBOM generation (Sigstore, cosign), dependency and container scanning (Snyk, Trivy), and automated vulnerability management. Define agent sandboxing and least-privilege execution. Set and enforce the security … expect to run: model registries (MLflow, Weights & Biases); container and dependency scanners (Snyk, Trivy); policy-as-code (OPA); supply-chain tooling (Sigstore, cosign); and SBOM generators. Experience with model-weight handling and the classification of sensitive or dual-use research artefacts. A background that combines infrastructure engineering with security, from ...

functionality you develop Experience with interacting with backend APIs (REST, Websocket) An understanding of secure software development and maintaining software with a complex SBOM Great written and spoken English, including the ability to learn about and discuss complex architectures with other developers A basic foundational understanding of the networking protocols ...

into environments with zero internet connectivity. Enforce Software Supply Chain Security: Implement cryptographic signing (e.g., Sigstore/Cosign, SLSA provenance), Software Bill of Materials (SBOM) generation, and automated vulnerability gating across all build pipelines. Automate Infrastructure-as-Code (IaC): Maintain release-side IaC and GitOps delivery frameworks (ArgoCD, Flux, Terraform … premise, edge, or air-gapped systems). Supply Chain Security Fluency: Solid understanding of build integrity concepts, artifact signing, provenance tracking, vulnerability scanning, and SBOM standards. CI/CD & GitOps Mastery: Proven experience designing enterprise pipelines (GitHub Actions, GitLab CI, Tekton, ArgoCD) with robust testing, canary/blue-green strategies ...

reduce dependency on scarce integrated environments. Security integration: Embed security controls into the pipeline: SAST, DAST, SCA, container and IaC scanning, secrets detection, and SBOM generation. Design the software supply chain security model — artefact provenance, signing, dependency governance, base image hardening. Define policy-as-code and automated control evidence …/k6, chaos and resilience tooling Security: SonarQube, Snyk, Checkmarx, Veracode, Trivy, secrets management (HashiCorp Vault, cloud-native equivalents), OPA/policy-as-code, SBOM and SLSA concepts. Platform: Kubernetes, containers, Terraform, service mesh, observability stacks AI/ML: MLOps and LLMOps tooling, model registries, vector stores and retrieval architectures ...

Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact signing and verification, dependency and base image policy, and the move from long‐lived pipeline secrets to OIDC federation. Harden … small team. Detection validation with purple teaming or Atomic Red Team, and hunting programmes that produced new detections. Supply chain security in depth: SBOM (CycloneDX or SPDX), Sigstore or cosign, and SLSA provenance. Policy as code with OPA or Kyverno. A background as a software or platform engineer before moving ...

Experience evaluating, procuring, and governing AI, machine learning, and emerging technology solutions. Regulatory Acumen Strong understanding of global software compliance standards, open-source licensing (SBOM/SBOA), cybersecurity regulations, and regulatory frameworks such as the Cyber Resilience Act (CRA). Leadership & Influence Outstanding cross-functional leadership skills with a proven ...

platforms, from first design to live operations across all our CI/CD pipelines Define our secure development standards and wire SAST, DAST and SBOM tooling into how we ship. Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure. Design our security testing … Azure, and other global hyperscalers. You've secured backend services at real scale and depth of complexity. Command of the secure SDLC: SAST, DAST, SBOM and the judgement to know which findings matter. Experience applying AI or LLMs to security: simulating threats, probing defences, building countermeasures. Solid cryptography and identity ...

About Docker Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world ...

The Company Modern software runs on open source, and managing the compliance, security, and regulatory complexity that comes with it is one of the biggest problems facing engineering and legal teams today. FOSSA is the ...

attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc). Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic integrity and evaluates … their output. Cryptographic Foundations: Comfortable with signing and verification: key material, ECDSA/RSA, certificate chains, OIDC-based keyless signing flows, and transparency logs. SBOM Formats: Familiarity with CycloneDX and SPDX, and how they are packaged as attestation artifacts. Backend & Platform Engineering Experience: 5+ years of production backend engineering, with ...

Overview Waters is seeking a Principal IVD Software Engineer to help shape the future of our LCMS Clinical and Diagnostic software portfolio. This is a highly influential individual contributor role suited to an experienced software ...

attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc). Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic integrity and evaluates … their output. Cryptographic Foundations: Comfortable with signing and verification: key material, ECDSA/RSA, certificate chains, OIDC-based keyless signing flows, and transparency logs. SBOM Formats: Familiarity with CycloneDX and SPDX, and how they are packaged as attestation artifacts. Backend & Platform Engineering Experience: 5+ years of production backend engineering, with ...

Chainguard is seeking a deeply technical security engineer to embed in our secure development lifecycle. You will design and maintain secure CI/CD pipelines with gates, enforce supply-chain controls, and harden Kubernetes and ...