Lead DevSecOps Engineer at Bloom & Wild Group | Amsterdam, North Holland, NL | Rezi

Lead DevSecOps Engineer at Bloom & Wild Group

Lead DevSecOps Engineer

Bloom & Wild Group · Amsterdam, North Holland, NL

2 weeks ago

Lead DevSecOps Engineer

Bloom & Wild Group · Amsterdam, North Holland, NL

18 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

As our first Lead DevSecOps Engineer, you will own security across our product and technology estate. You will act as a deep subject matter specialist, defining our 12-18 month security roadmap and embedding security into our "paved road" so doing the secure thing is the fast, default option for every engineer. You will split your time between strategic security roadmap & governance, shift-left controls & developer experience, and AI-first security & hands-on engineering.

Responsibilities

  • Define security priorities (OWASP SAMM audits).
  • Manage security vendors.
  • Handle responsible disclosures.
  • Advise leadership on risk trade-offs with commercial clarity.
  • Build security into CI/CD pipelines (code/dependency scanning, secrets management, policy-as-code, feature flagging).
  • Harden authentication.
  • Secure agentic AI workflows against prompt injection and data leakage.
  • Use agentic coding tools (e.g. Claude Code, Cursor) to accelerate remediation.

Requirements

  • Deep experience embedding security into fast-moving product engineering environments across AWS (ECS/Fargate) and GCP.
  • Expertise in infrastructure-as-code, CI/CD security, least-privilege identity, policy-as-code, and continuous monitoring.
  • Real, personal experience using agentic coding tools to accelerate security workflows.
  • Strong awareness of how to secure AI systems themselves.
  • Ability to operate as an individual contributor/expert without a team beneath you.
  • Ability to influence squads.
  • Ability to translate technical risk for senior stakeholders with candour and clarity.

Skills

  • AWS (Fargate/ECS)
  • GCP
  • Ruby on Rails
  • Angular
  • PostgreSQL
  • Terraform
  • Datadog
  • Infrastructure-as-code
  • CI/CD security
  • Least-privilege identity
  • Policy-as-code
  • Continuous monitoring
  • Agentic coding tools
  • AI systems security

Location

  • UK
  • Netherlands
  • Remote (Europe)

Work Type

  • Hybrid
  • Remote

Experience Level

  • Lead

Benefits

  • Core hours (10–4)
  • Hybrid or remote working
  • Up to 45 days per year to work abroad
  • 25 days holiday
  • Birthday off
  • Flexible bank holidays
  • Volunteering day
  • Day off for wedding or moving house
  • Option to buy more annual leave
  • Health cash plan
  • Equity option
  • Flexible training framework
  • Workplace nursery scheme
  • Generous product discounts

About the Company

  • Europe’s largest direct-to-consumer flower and gifting business (incorporating Bloom & Wild, bloomon, and Bergamotte).
  • Our 65+ person Tech team builds the software powering our e-commerce platforms, production, and delivery logistics across Europe.