Lead DevSecOps Engineer

Bloomon; Greater London; On-site; GBP 110,000 - 170,000; Full time

Benefits offered by this job

Flexibility: core hours, hybrid or rem

Work abroad up to 45 days/year

Health cash plan

Job summary

Bloom & Wild Group is hiring a Lead DevSecOps Engineer to own security across our product and technology estate. You’ll define a 12–18 month security roadmap and embed security as the default option for engineers, while reporting to the Engineering Director.

You’ll split your time between setting strategic roadmaps, building shift-left controls in CI/CD, and hands-on engineering to harden authentication and secure AI workflows. This is a Europe-wide, flexible role with hybrid/remote options.

Qualifications

• Experience embedding security into fast-moving product engineering teams.
• Lead the 12–18 month security roadmap and governance.
• Hands-on security work including CI/CD pipelines, secrets management, and policy-as-code.

Responsibilities

• Define security priorities and governance across product/tech estate.
• Partner with DX to strengthen security in CI/CD pipelines and tooling.
• Secure AI workflows and defeat prompt injection and data leakage.

Skills

Security engineering

Cloud security

DevSecOps

Infrastructure as code

CI/CD security

Policy as code

Threat modeling

Tools

AWS (ECS/Fargate)

GCP

Terraform

Datadog

Code scanning

Job description

Location: UK, Netherlands, or Remote (Europe)

Tech Stack: AWS (Fargate/ECS), GCP, Ruby on Rails, Angular, PostgreSQL, Terraform, Datadog

About Tech at Bloom & Wild Group

We’re Europe’s largest direct-to-consumer flower and gifting business (incorporating Bloom & Wild, bloomon, and Bergamotte). Our 65+ person Tech team builds the software powering our e-commerce platforms, production, and delivery logistics across Europe. You can read lo

The Role

As our first Lead DevSecOps Engineer, you’ll own security across our product and technology estate. Operating at the Lead level and reporting into our Engineering Director, you'll act as a deep subject matter specialist, defining our 12–18 month security roadmap and embedding security into our "paved road" so doing the secure thing is the fast, default option for every engineer.

You’ll split your time roughly between:

• Strategic Security Roadmap & Governance: Defining priorities (OWASP SAMM audits), managing vendors, responsible disclosures, and advising leadership on risk trade-offs with commercial clarity.

• Shift-Left Controls & Developer Experience: Partnering with DX to build security into CI/CD pipelines (code/dependency scanning, secrets management, policy-as-code, feature flagging).

• AI-First Security & Hands-On Engineering: Hardening authentication, securing agentic AI workflows against prompt injection and data leakage, and using agentic coding tools (e.g. Claude Code, Cursor) to accelerate remediation.

What we're looking for...

• Deep experience embedding security into fast-moving product engineering environments across AWS (ECS/Fargate) and GCP.

• Expertise in infrastructure-as-code, CI/CD security, least-privilege identity, policy-as-code, and continuous monitoring.

• Real, personal experience using agentic coding tools to accelerate security workflows, and a strong awareness of how to secure AI systems themselves.

• Ability to operate as an individual contributor/expert without a team beneath you, influencing squads and translating technical risk for senior stakeholders with candour and clarity.

Perks & Benefits

• Flexibility: Core hours (10–4), hybrid or remote working, plus up to 45 days per year to work abroad.

• Time Off: 25 days holiday + birthday + flexible bank holidays + a volunteering day + a day for wedding or moving house + the option to buy more annual leave

• Growth & Support: Health cash plan, equity option, flexible training framework, workplace nursery scheme, and generous product discounts