Lead DevSecOps Engineer - Secure AI & CI/CD (Remote)

Phoenix Court Group; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid or remote working

Up to 45 days abroad

Health cash plan

Equity option

Flexible training framework

Nursery scheme

Product discounts

Job summary

Bloom & Wild Group is seeking a Lead DevSecOps Engineer to own security across its product and technology stack. You will drive a 12–18 month security roadmap, embed security as the default option for engineers, and report to the Engineering Director.

You will split your time between strategic governance, shift-left security in CI/CD, and hands-on AI security work, partnering with DX and engineering teams to raise security maturity across AWS, GCP, and modern tooling.

Qualifications

• Deep experience embedding security into fast-moving product engineering environments across AWS (ECS/Fargate) and GCP.
• Expertise in infrastructure-as-code, CI/CD security, least-privilege identity, policy-as-code, and continuous monitoring.
• Real, personal experience using agentic coding tools to accelerate security workflows, and a strong awareness of how to secure AI systems themselves.
• Ability to operate as an individual contributor/expert without a team beneath you, influencing squads and translating technical risk for senior stakeholders with candour and clarity.

Responsibilities

• Strategic Security Roadmap & Governance: Defining priorities (OWASP SAMM audits), managing vendors, responsible disclosures, and advising leadership on risk trade-offs with commercial clarity.
• Shift-Left Controls & Developer Experience: Partnering with DX to build security into CI/CD pipelines (code/dependency scanning, secrets management, policy-as-code, feature flagging).
• AI-First Security & Hands-On Engineering: Hardening authentication, securing agentic AI workflows against prompt injection and data leakage, and using agentic coding tools to accelerate remediation.

Tools

AWS (ECS/Fargate)

GCP

Terraform

Datadog

Ruby on Rails

Angular

PostgreSQL

Job description

Bloom & Wild Group is seeking a Lead DevSecOps Engineer to own security across its product and technology stack. You will drive a 12–18 month security roadmap, embed security as the default option for engineers, and report to the Engineering Director.

You will split your time between strategic governance, shift-left security in CI/CD, and hands-on AI security work, partnering with DX and engineering teams to raise security maturity across AWS, GCP, and modern tooling.