DevOps Engineer - WFH

# Lead DevSecOps Engineer ## About the Role Bloom & Wild Group is hiring a work with modern security practices including policy-as-code, secrets management, least- **Lead DevSecOps Engineer** to own security across its product and technology estate. In this role, you will define and drive a **12–18 month security roadmap**, embed security into CI/CD pipelines, and apply AI-first security practices across the technology environment. The role is suited to an experienced DevSecOps and cloud security professional with deep expertise in **AWS, GCP, and Infrastructure-as-Code**. You will work with modern security practices including policy-as-code, secrets management, least-privilege identity, continuous monitoring, and AI-assisted development tools. ## Key Responsibilities - Own security across the product and technology estate. - Define and drive a **12–18 month security roadmap**. - Embed security practices into **CI/CD pipelines**. - Apply AI-first security practices across the technology environment. - Work with AWS and GCP cloud environments. - Use Infrastructure-as-Code to support secure infrastructure and deployments. - Implement and apply policy-as-code practices. - Manage and strengthen secrets management. - Apply least-privilege identity principles. - Establish and support continuous security monitoring. - Use agentic coding tools and AI-assisted development practices, including **Claude Code** and **Cursor**. - Apply security frameworks and practices including **OWASP SAMM**. ## Required Qualifications - Deep experience with **AWS**. - Deep experience with **GCP**. - Deep experience with **Infrastructure-as-Code**. - Strong experience in **DevSecOps and security**. - Experience embedding security into **CI/CD** pipelines. - Experience with security practices including policy-as-code, secrets management, least-privilege identity, and continuous monitoring. ## Preferred Qualifications - Experience with **OWASP SAMM**. - Experience with **Terraform**. - Experience using **agentic coding tools**. - Experience with **Claude Code**. - Experience with **Cursor**. - Experience implementing AI-first security practices. ## Skills & Competencies - DevSecOps - Cloud security - AWS - GCP - Infrastructure-as-Code - Terraform - CI/CD - Security roadmap development - OWASP SAMM - Policy-as-Code - Secrets Management - Least-Privilege Identity - Continuous Monitoring - AI-first security practices - Agentic Coding Tools - Claude Code - Cursor ## Education & Experience **Education:** - No specific educational qualification is stated in the source job description. **Experience:** - Deep experience with **AWS, GCP, and Infrastructure-as-Code**. - Relevant experience in DevSecOps, cloud security, CI/CD security, and the security practices specified above. ## Work Arrangement & Schedule - **Location:** Amsterdam, Noord-Holland, Netherlands - **Work arrangement:** Remote - **Geographic eligibility:** Remote within Europe, or based in the **UK or Netherlands**. - **Employment type:** Not specified in the source job description. - **Weekly hours:** Not specified in the source job description. - **Schedule flexibility:** Not specified in the source job description. ## Compensation & Benefits - **Currency:** EUR - **Compensation:** No specific salary or compensation amount is provided in the source job description. - **Benefits:** Not specified in the source job description. ## Compliance / Additional Information - **Employer:** Bloom & Wild Group - **Recruiting/source organization:** Slashhash - The role has responsibility for security across the company's **product and technology estate**. - The source job description does not specify certifications, degree requirements, years of experience, or additional benefits; none have been added.