Lead DevSecOps Engineer — AI Security Roadmap (Remote)

bloomon; Amsterdam; Hybrid; EUR 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid or remote working

Health cash plan

Equity option

Flexible training framework

Nursery scheme

Product discounts

Job summary

Bloom & Wild Group is looking for a Lead DevSecOps Engineer to own security across the product and technology estate. You will report to the Engineering Director and define a 12-18 month security roadmap, embedding secure choices as the fast default option for every engineer.

You’ll split time roughly between strategic governance, shift-left controls in CI/CD pipelines, and hands-on security for AI workflows to harden authentication and safeguard data.

Qualifications

• Deep experience embedding security into fast-moving product engineering environments across AWS (ECS/Fargate) and GCP.
• Expertise in infrastructure-as-code, CI/CD security, least-privilege identity, policy-as-code, and continuous monitoring.
• Experience using agentic coding tools to accelerate security workflows and securing AI systems.
• Ability to influence squads and translate technical risk for senior stakeholders with candour.

Responsibilities

• Strategic Security Roadmap & Governance: Defining priorities, managing vendors, disclosures, and advising leadership on risk trade-offs with commercial clarity.
• Shift-Left Controls & Developer Experience: Partnering with DX to build security into CI/CD pipelines (code/dependency scanning, secrets management, policy-as-code, feature flagging).
• AI-First Security & Hands-On Engineering: Hardening authentication, securing agentic AI workflows against prompt injection and data leakage, and using agentic tools to accelerate remediation.

Skills

Security leadership

DevSecOps

Cloud security

IaC

CI/CD security

Agentic tools

Risk communication

Tools

Terraform

Datadog

Claude Code

Cursor

CI/CD tooling

Job description

Bloom & Wild Group is looking for a Lead DevSecOps Engineer to own security across the product and technology estate. You will report to the Engineering Director and define a 12-18 month security roadmap, embedding secure choices as the fast default option for every engineer.

You’ll split time roughly between strategic governance, shift-left controls in CI/CD pipelines, and hands-on security for AI workflows to harden authentication and safeguard data.