# Lead DevSecOps Engineer
## About the Role
Bloom & Wild Group is hiring a work with modern security practices including policy-as-code, secrets management, least- **Lead DevSecOps Engineer** to own security across its product and technology estate. In this role, you will define and drive a **12–18 month security roadmap**, embed security into CI/CD pipelines, and apply AI-first security practices across the technology environment.
The role is suited to an experienced DevSecOps and cloud security professional with deep expertise in **AWS, GCP, and Infrastructure-as-Code**. You will work with modern security practices including policy-as-code, secrets management, least-privilege identity, continuous monitoring, and AI-assisted development tools.
## Key Responsibilities
- Own security across the product and technology estate.
- Define and drive a **12–18 month security roadmap**.
- Embed security practices into **CI/CD pipelines**.
- Apply AI-first security practices across the technology environment.
- Work with AWS and GCP cloud environments.
- Use Infrastructure-as-Code to support secure infrastructure and deployments.
- Implement and apply policy-as-code practices.
- Manage and strengthen secrets management.
- Apply least-privilege identity principles.
- Establish and support continuous security monitoring.
- Use agentic coding tools and AI-assisted development practices, including **Claude Code** and **Cursor**.
- Apply security frameworks and practices including **OWASP SAMM**.
## Required Qualifications
- Deep experience with **AWS**.
- Deep experience with **GCP**.
- Deep experience with **Infrastructure-as-Code**.
- Strong experience in **DevSecOps and security**.
- Experience embedding security into **CI/CD** pipelines.
- Experience with security practices including policy-as-code, secrets management, least-privilege identity, and continuous monitoring.
## Preferred Qualifications
- Experience with **OWASP SAMM**.
- Experience with **Terraform**.
- Experience using **agentic coding tools**.
- Experience with **Claude Code**.
- Experience with **Cursor**.
- Experience implementing AI-first security practices.
## Skills & Competencies
- DevSecOps
- Cloud security
- AWS
- GCP
- Infrastructure-as-Code
- Terraform
- CI/CD
- Security roadmap development
- OWASP SAMM
- Policy-as-Code
- Secrets Management
- Least-Privilege Identity
- Continuous Monitoring
- AI-first security practices
- Agentic Coding Tools
- Claude Code
- Cursor
## Education & Experience
**Education:**
- No specific educational qualification is stated in the source job description.
**Experience:**
- Deep experience with **AWS, GCP, and Infrastructure-as-Code**.
- Relevant experience in DevSecOps, cloud security, CI/CD security, and the security practices specified above.
## Work Arrangement & Schedule
- **Location:** Amsterdam, Noord-Holland, Netherlands
- **Work arrangement:** Remote
- **Geographic eligibility:** Remote within Europe, or based in the **UK or Netherlands**.
- **Employment type:** Not specified in the source job description.
- **Weekly hours:** Not specified in the source job description.
- **Schedule flexibility:** Not specified in the source job description.
## Compensation & Benefits
- **Currency:** EUR
- **Compensation:** No specific salary or compensation amount is provided in the source job description.
- **Benefits:** Not specified in the source job description.
## Compliance / Additional Information
- **Employer:** Bloom & Wild Group
- **Recruiting/source organization:** Slashhash
- The role has responsibility for security across the company's **product and technology estate**.
- The source job description does not specify certifications, degree requirements, years of experience, or additional benefits; none have been added.