Overview

Ship application features and help automate the infrastructure they run on: build the dashboards and APIs behind our signing and BOM platform, with room to grow across development, cloud/DevOps and real security engineering.

Responsibilities

• Design and develop responsive, intuitive front-end applications using modern web technologies.
• Build scalable back-end services and RESTful APIs for security, automation and workflow orchestration.
• Develop secure, reliable and high-performance applications across the full technology stack.
• Automate build, testing and deployment processes using CI/CD pipelines and Infrastructure-as-Code (IaC).
• Containerise applications with Docker and deploy, manage and optimise workloads on Kubernetes across on-premises and air-gapped environments.
• Integrate security controls and policy enforcement into CI/CD pipelines, deployment gates and Kubernetes admission controllers.
• Design and optimise databases, APIs and application architecture for scalability, reliability and maintainability.
• Write clean, maintainable, well-tested and well-documented code, and actively participate in code reviews and technical design discussions.
• Collaborate closely with product managers, UX designers, DevOps engineers and security teams to deliver high-quality software.
• Troubleshoot production issues, optimise application performance, and continuously improve the development lifecycle and engineering practices.

Qualifications

• JavaScript/TypeScript with a modern front-end framework (React / Angular / Vue)
• Back-end experience with Node.js / Python / Go
• REST APIs and databases (SQL and/or NoSQL)
• Hands-on with CI/CD pipelines (e.g. GitLab CI, GitHub Actions or Jenkins)
• Containers and orchestration: Docker, and exposure to Kubernetes
• Git and version-control workflows; solid HTML/CSS and responsive design
• Infrastructure as Code (Terraform, Helm or Ansible)
• Automated deployment and environment provisioning
• Familiarity with at least one cloud platform (AWS / GCP / Azure) and/or on-prem clusters
• Interest in secure, repeatable pipelines and release automation
• Gain hands-on experience with modern software supply chain security technologies, including SBOMs, software provenance, artefact signing, Sigstore, in-toto and the JSON Canonicalization Scheme (JCS, RFC 8785).
• Build solutions that verify software integrity, detect tampering and enforce verification policies throughout the software development and deployment lifecycle.
• Work with modern cryptographic technologies, including certificate, key and algorithm lifecycle management, as well as emerging Post-Quantum Cryptography (PQC) concepts.
• Develop and deploy security-first applications in highly regulated, on-premises and fully air-gapped environments where data sovereignty and trust are critical.
• Contribute to platforms that help organisations establish end-to-end trust, transparency and integrity across their software supply chains.
• Bachelor's in computer science or equivalent practical experience
• 0–4 years hands-on development (strong internships and projects count for freshers)

Nice to have

• Contributions to open-source security tooling, or a portfolio/GitHub
• Prior work with CycloneDX or SPDX bill-of-materials formats
• Familiarity with post-quantum / cryptographic migration concerns

Benefits

• Competitive salary, learning budget, flexible hours, and the chance to work on a real, production security product from day one.