1 to 25 of 27 SBOM Jobs in the UK excluding London

doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes/container environments Embed SAST, DAST, SCA, SBOM and secret scanning into CI/CD pipelines Perform security code reviews and provide secure coding guidance Define security requirements and support engineering teams with secure ...

bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. A proactive, curious ...

security code reviews and act as a technical SME for engineering and compliance teams. Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines. Apply manual network/application testing, custom scripting, and unit test cases to validate controls. Recommend ...

stakeholder management and communication skills Desirable: Experience in financial services or regulated environments Knowledge of Kubernetes and container security Familiarity with supply chain security, SBOM, and secure development practices Experience with workflow/orchestration tooling and event-driven automation Relevant certifications (e.g. CISSP, CISM, CCSP) More details available on successful ...

Experience with Kubernetes platform engineering and cluster lifecycle management. AWS Certifications at Associate level or above. Experience with security tooling such as SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code. Experience working in high-security or regulated environments. Experience contributing to open-source projects. Experience of using ...

vulnerabilities against OWASP Top 10 and CVSS principles Implementing secrets detection, credential rotation and secure Key Vault practices Strengthening software supply-chain security through SBOM generation, dependency scanning and artefact signing Supporting API security testing, threat modelling and third-party penetration tests Configuring Azure-native security tooling, including Defender ...

misconfiguration, identity exposure, and attack-path analysis using cloud-native tooling (AWS Inspector, GuardDuty, Security Hub, or equivalents). Experience securing software supply chains — SBOM generation, dependency provenance, artifact signing — and integrating this into build pipelines rather than a standalone assurance process. Experience building or shaping security engineering capability within ...

engineering at production scale: runtime detection, anomaly detection, alert tuning (Sigma, OSQuery, Falco, or equivalent) Supply-chain security: SLSA, sigstore/cosign, in-toto, SBOM tooling used as a real control Cloud-native attack patterns on AWS: IAM privilege analysis, IMDS exploitation, cross-account paths, KMS misuse, and the defences ...

risk tracking through the security case and register. Secure Development & DevSecOpsIntegrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier EngagementSupport V&V, penetration testing ...

tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing ...

delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial but is not essential ...

delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial but is not essential ...

cloud and SaaS security best practices: least privilege, managed identities, secret management, network security, private endpoints, and secure software supply chain practices (image scanning, SBOM, dependency governance). Awareness of compliance, data residency and multi‐region considerations in multi‐tenant Azure environments. Technical leadership and communication Ability to run proofs ...

with Docker and Kubernetes Understanding of SQL Server and NoSQL technologies such as Cosmos DB or RavenDB Exposure to secure development practices including SAST, SBOM generation and vulnerability scanning Why join System C? At System C, you'll work alongside talented people who care deeply about making a difference. ...

with Docker and Kubernetes Understanding of SQL Server and NoSQL technologies such as Cosmos DB or RavenDB Exposure to secure development practices including SAST, SBOM generation and vulnerability scanning Why join System C? At System C, you'll work alongside talented people who care deeply about making a difference. ...

with Docker and Kubernetes Understanding of SQL Server and NoSQL technologies such as Cosmos DB or RavenDB Exposure to secure development practices including SAST, SBOM generation and vulnerability scanning At System C, you'll work alongside talented people who care deeply about making a difference. We foster a supportive environment ...

advanced SIEM correlation rules, custom data parsers, and detection logic to significantly minimize alert fatigue for the SOC team. Architect the end-to-end SBOM lifecycle to continuously track, analyze, and mitigate open-source and third-party software supply chain risks. Design a risk-based vulnerability management platform that automatically ...

TL;DR: We're looking for a deeply technical Application Security Engineer to embed inside engineering and help secure Cloudsmith 2.0, the operating system for the modern software supply chain. The ideal person is a ...

/CD delivery pipelines Implementing container, IaC, secrets and software composition scanning Building software supply chain security controls including image signing, verification and SBOM generation Developing Policy-as-Code controls using OPA, Rego, Kyverno or similar technologies Securing and hardening EKS environments through RBAC, Network Policies and Admission Controllers Supporting … Service Mesh security AWS Private CA and IAM Roles Anywhere Harness CI/CD OPA, Gatekeeper, Kyverno or OSCAL Sigstore, Cosign, SLSA and SBOM tooling Internal Developer Platform (IDP) security AWS Security Specialty, CKS, CISSP or equivalent certifications Experience within regulated financial services environments Why Apply? This is an opportunity ...

REST for cross-language integration. Performance Optimization : GPU acceleration (CUDA/cuDNN), mixed precision, XLA, profiling. Observability : Metrics, tracing, structured logging, dashboards. Security : SBOM, image signing, role-based access, vulnerability scanning. Preferred Qualifications Experience with ONNX Runtime Training, PyTorch, or hybrid ML architectures. Familiarity with distributed training strategies and multi ...

Senior Engineer, Platform - (Pipelines & Developer Experience) United Kingdom (Remote) Job Description Senior Engineer, Platform - (Pipelines & Developer Experience) Overview As Fanatics Betting & Gaming (FBG) accelerates Fanatics' mission to build the ultimate digital sports platform, the Platform ...

Quality Assurance Engineer to develop and validate a comprehensive SQA test suite for High Voltage Battery projects. The role requires static and dynamic analysis, SBOM creation, and vulnerability assessment, with integration into CI processes. You will coordinate with suppliers and work with cross-functional teams to ensure compliance with safety ...

Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams. Core Responsibilities : Design and maintain Groovy pipeline steps (build, test, package, scan, deploy). Extend Python tooling … SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling). Refactor legacy scripts (remove global state, consolidate ...

attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc).Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic integrity and evaluates attestation … their output. Cryptographic Foundations: Comfortable with signing and verification: key material, ECDSA/RSA, certificate chains, OIDC-based keyless signing flows, and transparency logs. SBOM Formats: Familiarity with CycloneDX and SPDX, and how they are packaged as attestation artifacts. Backend & Platform EngineeringExperience: 5+ years of production backend engineering, with real ...

* United Kingdom - Hampshire - Farnborough Why Work at Lenovo We are Lenovo. We do what we say. We own what we do. We WOW our customers. Lenovo is a US$83 billion revenue global technology powerhouse ...