Security Lead
Licensed sponsor United Kingdom Contract Posted 2 hours ago
- 10+ yrs; product security in a software vendor
- SSDLC; vulnerability remediation SLAs; SAST/DAST/SBOM; Schedule 17 compliance; incident notice within 4/12 hrs; AI no-training and provenance controls; Cyber Resilience Act readiness
- Must have AppSec; CodeQL/Snyk/Mend/ZAP; dependency and SBOM management; secrets management
- Code-signing controls; GDPR and sub-processor obligations; AI governance.
- CISSP (named in template), CSSLP, OSCP/GWAPT Certification-Nice to have.