Software Asset Manager

Wipro; Coventry; On-site; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Contributory pension

Life insurance policy

Private medical insurance

Job summary

A leading international technology firm in the United Kingdom is looking for a candidate to manage and generate Software Bill of Materials (SBOMs). The role requires collaboration with security teams to identify vulnerabilities and integrate SBOM generation into CI/CD pipelines. The ideal applicant has experience in cybersecurity or supply chain risk management. This position offers a competitive salary, contributory pension, life insurance, and private medical insurance along with opportunities for training and development.

Qualifications

• Experience in cybersecurity, software development, or supply chain risk management.
• Hands-on experience with SBOM generation and analysis tools.
• Familiarity with vulnerability databases (CVE, NVD) and risk assessment.

Responsibilities

• Generate and maintain SBOMs for all software products.
• Integrate SBOM generation into CI/CD pipelines for automated updates.
• Identify vulnerabilities in software components using SBOM data.
• Collaborate with security teams to integrate SBOMs with vulnerability tools.
• Assess risks in software supply chains using SBOM data.
• Work with vendors to validate SBOMs and ensure transparency in third-party components.
• Implement SBOM tooling and integrate with DevSecOps platforms and build systems.
• Enable automated workflows for SBOM updates and vulnerability scanning.

Skills

Proficiency in SBOM standards (SPDX, CycloneDX)

Knowledge of software composition analysis (SCA)

Familiarity with vulnerability databases (NVD, CVE)

Security collaboration

SBOM tooling

Education

CISSP, CISA, or SBOM-specific training

Tools

Dependency-Track

OWASP

CI/CD tooling

Job description

Responsibilities

• Generate and maintain SBOMs for all software products, ensuring completeness and accuracy.
• Integrate SBOM generation into CI/CD pipelines for automated updates.
• Use SBOM data to identify vulnerabilities in software components and prioritize remediation.
• Collaborate with security teams to integrate SBOMs with vulnerability management tools and threat intelligence feeds.
• Assess risks in software supply chains using SBOM data and provide recommendations for mitigation.
• Work with vendors to validate SBOMs and ensure transparency in third-party components.
• Implement SBOM tooling and integrate with DevSecOps platforms, artifact repositories, and build systems.
• Enable automated workflows for SBOM updates and vulnerability scanning.

Technical Skills

• Proficiency in SBOM standards (SPDX, CycloneDX) and tools (Dependency-Track, OWASP).
• Knowledge of software composition analysis (SCA) and CI/CD integration. [ntia.gov]
• Familiarity with vulnerability databases (NVD, CVE) and risk assessment frameworks.
• Preferred: CISSP, CISA, or SBOM-specific training.

Experience Requirements

• Experience in cybersecurity, software development, or supply chain risk management.
• Hands‑on experience with SBOM generation and analysis tools.

You will receive a competitive salary, a generous benefits package, training, and development, as well as an exciting career within a fast paced and dynamic business.

Benefits

• Contributory pension
• Life insurance policy
• Private medical insurance

Wipro is an advocate for positive change and conscious inclusion. As a global employer, we strive to create a diverse Wipro family by remaining committed to the development of our culture, diversity, equality, and inclusion in the workplace. All applicants are welcome.