13 of 13 Remote/Hybrid SBOM Jobs in the UK excluding London

bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. A proactive, curious ...

security code reviews and act as a technical SME for engineering and compliance teams. Security Testing & DevSecOpsDeploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines. Apply manual network/application testing, custom scripting, and unit test cases to validate controls. Recommend ...

misconfiguration, identity exposure, and attack-path analysis using cloud-native tooling (AWS Inspector, GuardDuty, Security Hub, or equivalents). Experience securing software supply chains — SBOM generation, dependency provenance, artifact signing — and integrating this into build pipelines rather than a standalone assurance process. Experience building or shaping security engineering capability within ...

delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial but is not essential ...

delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial but is not essential ...

cloud and SaaS security best practices: least privilege, managed identities, secret management, network security, private endpoints, and secure software supply chain practices (image scanning, SBOM, dependency governance). Awareness of compliance, data residency and multi‐region considerations in multi‐tenant Azure environments. Technical leadership and communication Ability to run proofs ...

TL;DR: We're looking for a deeply technical Application Security Engineer to embed inside engineering and help secure Cloudsmith 2.0, the operating system for the modern software supply chain. The ideal person is a ...

/CD delivery pipelines Implementing container, IaC, secrets and software composition scanning Building software supply chain security controls including image signing, verification and SBOM generation Developing Policy-as-Code controls using OPA, Rego, Kyverno or similar technologies Securing and hardening EKS environments through RBAC, Network Policies and Admission Controllers Supporting … Service Mesh security AWS Private CA and IAM Roles Anywhere Harness CI/CD OPA, Gatekeeper, Kyverno or OSCAL Sigstore, Cosign, SLSA and SBOM tooling Internal Developer Platform (IDP) security AWS Security Specialty, CKS, CISSP or equivalent certifications Experience within regulated financial services environments Why Apply? This is an opportunity ...

Senior Engineer, Platform - (Pipelines & Developer Experience) United Kingdom (Remote) Job Description Senior Engineer, Platform - (Pipelines & Developer Experience) Overview As Fanatics Betting & Gaming (FBG) accelerates Fanatics' mission to build the ultimate digital sports platform, the Platform ...

Quality Assurance Engineer to develop and validate a comprehensive SQA test suite for High Voltage Battery projects. The role requires static and dynamic analysis, SBOM creation, and vulnerability assessment, with integration into CI processes. You will coordinate with suppliers and work with cross-functional teams to ensure compliance with safety ...

Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams. Core Responsibilities : Design and maintain Groovy pipeline steps (build, test, package, scan, deploy). Extend Python tooling … SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling). Refactor legacy scripts (remove global state, consolidate ...

attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc).Store: Own the storage architecture for signed provenance metadata. Validate: Build the validation engine that verifies cryptographic integrity and evaluates attestation … their output. Cryptographic Foundations: Comfortable with signing and verification: key material, ECDSA/RSA, certificate chains, OIDC-based keyless signing flows, and transparency logs. SBOM Formats: Familiarity with CycloneDX and SPDX, and how they are packaged as attestation artifacts. Backend & Platform EngineeringExperience: 5+ years of production backend engineering, with real ...

Overview Waters is seeking a Principal IVD Software Engineer to help shape the future of our LCMS Clinical and Diagnostic software portfolio. This is a highly influential individual contributor role suited to an experienced software ...