Lead DevSecOps Engineer – Secure by Default, Remote Europe

Bloom & Wild; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Flexible working hours

Hybrid or remote working

Up to 45 days abroad

Health cash plan

Equity option

Flexible training framework

Nursery scheme

Product discounts

Job summary

Bloom & Wild, Europe’s largest direct-to-consumer flower and gifting business, is seeking its first Lead DevSecOps Engineer to own security across the product and technology estate. You will define a 12–18 month security roadmap and embed secure practices as the default option for engineers.

You’ll balance strategic governance with hands-on work, partnering with DX to secure CI/CD pipelines, and you’ll lead security initiatives across AWS (ECS/Fargate) and GCP while addressing AI security

Qualifications

• Deep experience embedding security into fast-moving product engineering environments.
• Experience with AWS (ECS/Fargate) and GCP security.
• Hands-on with infrastructure-as-code, CI/CD security, and policy-as-code.

Responsibilities

• Define security roadmap and governance for 12–18 months.
• Embed security into CI/CD pipelines and developer experience.
• Hardening authentication and securing AI workflows; address prompt injections and data leakage.

Skills

AWS (ECS/Fargate)

GCP

Infrastructure as code

CI/CD security

Least-privilege identity

Policy as code

Continuous monitoring

Agentic coding tools (AI)

Security roadmap & governance

Tools

Terraform

Datadog

Code & security tooling

Job description

Bloom & Wild, Europe’s largest direct-to-consumer flower and gifting business, is seeking its first Lead DevSecOps Engineer to own security across the product and technology estate. You will define a 12–18 month security roadmap and embed secure practices as the default option for engineers.

You’ll balance strategic governance with hands-on work, partnering with DX to secure CI/CD pipelines, and you’ll lead security initiatives across AWS (ECS/Fargate) and GCP while addressing AI security