Lead DevSecOps Engineer

About the Role

Bloom & Wild Group is hiring a work with modern security practices including policy-as-code, secrets management, least- **Lead DevSecOps Engineer** to own security across its product and technology estate. In this role, you will define and drive a **12–18 month security roadmap**, embed security into CI/CD pipelines, and apply AI-first security practices across the technology environment.

The role is suited to an experienced DevSecOps and cloud security professional with deep expertise in **AWS, GCP, and Infrastructure-as-Code**. You will work with modern security practices including policy-as-code, secrets management, least-privilege identity, continuous monitoring, and AI-assisted development tools.

Key Responsibilities

• Own security across the product and technology estate.

• Define and drive a **12–18 month security roadmap**.

• Embed security practices into **CI/CD pipelines**.

• Apply AI-first security practices across the technology environment.

• Work with AWS and GCP cloud environments.

• Use Infrastructure-as-Code to support secure infrastructure and deployments.

• Implement and apply policy-as-code practices.

• Manage and strengthen secrets management.

• Apply least-privilege identity principles.

• Establish and support continuous security monitoring.

• Use agentic coding tools and AI-assisted development practices, including **Claude Code** and **Cursor**.

• Apply security frameworks and practices including **OWASP SAMM**.

Required Qualifications

• Deep experience with **AWS**.

• Deep experience with **GCP**.

• Deep experience with **Infrastructure-as-Code**.

• Strong experience in **DevSecOps and security**.

• Experience embedding security into **CI/CD** pipelines.

• Experience with security practices including policy-as-code, secrets management, least-privilege identity, and continuous monitoring.

Preferred Qualifications

• Experience with **OWASP SAMM**.

• Experience with **Terraform**.

• Experience using **agentic coding tools**.

• Experience with **Claude Code**.

• Experience with **Cursor**.

• Experience implementing AI-first security practices.

Skills & Competencies

• DevSecOps

• Cloud security

• AWS

• GCP

• Infrastructure-as-Code

• Terraform

• CI/CD

• Security roadmap development

• OWASP SAMM

• Policy-as-Code

• Secrets Management

• Least-Privilege Identity

• Continuous Monitoring

• AI-first security practices

• Agentic Coding Tools

• Claude Code

• Cursor

Education & Experience

**Education:**

• No specific educational qualification is stated in the source job description.

**Experience:**

• Deep experience with **AWS, GCP, and Infrastructure-as-Code**.

• Relevant experience in DevSecOps, cloud security, CI/CD security, and the security practices specified above.

Work Arrangement & Schedule

• **Location:** Amsterdam, Noord-Holland, Netherlands

• **Work arrangement:** Remote

• **Geographic eligibility:** Remote within Europe, or based in the **UK or Netherlands**.

• **Employment type:** Not specified in the source job description.

• **Weekly hours:** Not specified in the source job description.

• **Schedule flexibility:** Not specified in the source job description.

Compensation & Benefits

• **Currency:** EUR

• **Compensation:** No specific salary or compensation amount is provided in the source job description.

• **Benefits:** Not specified in the source job description.

Compliance / Additional Information

• **Employer:** Bloom & Wild Group

• **Recruiting/source organization:** Slashhash

• The role has responsibility for security across the company's **product and technology estate**.

• The source job description does not specify certifications, degree requirements, years of experience, or additional benefits; none have been added.

Rad na daljinu: Da

Izvor: https://www.linkedin.com/jobs/view/4466482571/

Nivo: mid level