Please note: This role is only open to redeployee applicants at City St George's in the first instance. Applications from individuals who are not redeployee applicants will not be considered at this time.
If you are a redeployee, please email your CV and cover letter to [email protected] with the job title and reference number, demonstrating how you meet the essential criteria outlined in the person specification.
City St George’s, University of London is the University of business, practice and the professions and brings together the expertise and excellence of City, University of London and St George’s, University of London into one institution. The combined university is now one of the largest higher education destinations for London students, combining a breadth of disciplines across health, business, policy, law, creativity, communications, science and technology. Our students are at the heart of everything that we do, and we are committed to supporting them to pursue their career and personal ambitions.
Our research is engaged, at the frontier of practice and has a positive impact on the world around us.
City St George’s, University of London is seeking a postdoctoral researcher to work on TrustAttest, an Innovate UK project developing a continuous compliance monitoring and automated remediation platform for SME software vendors.
The project addresses adoption of the UK Government’s Software Security Code of Practice by translating SSCoP requirements into observable technical signals across development environments such as GitHub, GitLab, CI/CD pipelines, SBOMs, vulnerability databases, and cloud services. The research assistant will contribute to the formal SSCoP-to-signal mapping ontology and associated evaluation methods.
The successful candidate will contribute to the development of innovative methods linking Secure Software Code of Practice (SSCoP) principles to machine-observable security evidence, analyse software development and supply chain telemetry, and support AI-assisted compliance monitoring. Working closely with Assentian, City St George’s researchers, and industry partners, they will help evaluate compliance signals, classifier performance, and vulnerability reduction through pilot deployments and real-world validation activities.
Candidates should have a Masters, or equivalent experience, in computer science, cybersecurity, software engineering, engineering, AI for security, formal methods, or a related area. Experience with software supply chain security, SBOMs, CI/CD security, vulnerability management, compliance automation, ontologies, machine learning evaluation, or developer security tooling would be advantageous.
This post is suitable for a researcher interested in applied cybersecurity, secure software engineering, AI-supported compliance, and industry-facing research with practical deployment and evaluation.
Closing date for applications: 9 August 2026 at 11:59pm
Interviews dates are to be confirmed.
For more information about the role please refer to the job description.
The selection process will involve an interview Further details will be confirmed at the interview stage.
City St George’s offers a sector-leading salary, pension scheme and benefits including a comprehensive package of staff training and development.
City St George’s, University of London is committed to promoting equality, diversity and inclusion in all its activities, processes, and culture for our whole community, including staff, students and visitors.
We welcome applications regardless of age, caring responsibilities, disability, gender identity, gender reassignment, marital status, nationality, pregnancy, race and ethnic origin, religion and belief, sex, sexual orientation and socio-economic background. City St George’s operates a guaranteed interview scheme for disabled applicants.
The University of business, practice and the professions
