Responsibilities
Generate and maintain SBOMs for all software products, ensuring completeness and accuracy.
Integrate SBOM generation into CI/CD pipelines for automated updates.
Use SBOM data to identify vulnerabilities in software components and prioritize remediation.
Collaborate with security teams to integrate SBOMs with vulnerability management tools and threat intelligence feeds.
Assess risks in software supply chains using SBOM data and provide recommendations for mitigation.
Work with vendors to validate SBOMs and ensure transparency in third-party components.
Implement SBOM tooling and integrate with DevSecOps platforms, artifact repositories, and build systems.
Enable automated workflows for SBOM updates and vulnerability scanning.
Technical Skills
Proficiency in SBOM standards (SPDX, CycloneDX) and tools (Dependency-Track, OWASP).
Knowledge of software composition analysis (SCA) and CI/CD integration. [ntia.gov]
Familiarity with vulnerability databases (NVD, CVE) and risk assessment frameworks.
Preferred: CISSP, CISA, or SBOM-specific training.
Experience Requirements
Experience in cybersecurity, software development, or supply chain risk management.
Handsβon experience with SBOM generation and analysis tools.
You will receive a competitive salary, a generous benefits package, training, and development, as well as an exciting career within a fast paced and dynamic business.
Benefits
Contributory pension
Life insurance policy
Private medical insurance
Wipro is an advocate for positive change and conscious inclusion. As a global employer, we strive to create a diverse Wipro family by remaining committed to the development of our culture, diversity, equality, and inclusion in the workplace. All applicants are welcome.
#J-18808-Ljbffr
Contact Detail:
Wipro Recruiting Team