bloomon
Lead DevSecOps Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
📍 Location: UK, Netherlands, or Remote (Europe)
🛠️ Tech Stack: AWS (Fargate/ECS), GCP, Ruby on Rails, Angular, PostgreSQL, Terraform, Datadog
About Tech At Bloom & Wild Group 💐
We’re Europe’s largest direct-to-consumer flower and gifting business (incorporating Bloom & Wild, bloomon, and Bergamotte). Our 65+ person Tech team builds the software powering our e-commerce platforms, production, and delivery logistics across Europe. You can read more here.
The Role
As our first Lead DevSecOps Engineer, you’ll own security across our product and technology estate. Operating at the Lead level and reporting into our Engineering Director, you'll act as a deep subject matter specialist, defining our 12-18 month security roadmap and embedding security into our "paved road" so doing the secure thing is the fast, default option for every engineer.
You'll Split Your Time Roughly Between
- Strategic Security Roadmap & Governance: Defining priorities (OWASP SAMM audits), managing vendors, responsible disclosures, and advising leadership on risk trade-offs with commercial clarity.
- Shift-Left Controls & Developer Experience: Partnering with DX to build security into CI/CD pipelines (code/dependency scanning, secrets management, policy-as-code, feature flagging).
- AI-First Security & Hands-On Engineering: Hardening authentication, securing agentic AI workflows against prompt injection and data leakage, and using agentic coding tools (e.g. Claude Code, Cursor) to accelerate remediation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For...
- Deep experience embedding security into fast-moving product engineering environments across AWS (ECS/Fargate) and GCP.
- Expertise in infrastructure-as-code, CI/CD security, least-privilege identity, policy-as-code, and continuous monitoring.
- Real, personal experience using agentic coding tools to accelerate security workflows, and a strong awareness of how to secure AI systems themselves.
- Ability to operate as an individual contributor/expert without a team beneath you, influencing squads and translating technical risk for senior stakeholders with candour and clarity.
Don't check every box? Please apply anyway! We hire for potential and diverse perspectives over exhaustive checklists.
Perks & Benefits
- ✨ Flexibility: Core hours (10-4), hybrid or remote working, plus up to 45 days per year to work abroad.
- 🌴 Time Off: 25 days holiday + birthday + flexible bank holidays + a volunteering day + a day for wedding or moving house + the option to buy more annual leave
- 🌱 Growth & Support: Health cash plan, equity option, flexible training framework, workplace nursery scheme, and generous product discounts
Get help with your application
Your very own career expert that helps elevate your application to the next level.
How We Hire
- Initial Chat (30-min call with our Talent Acquisition Manager)
- Manager Interview (Deep dive on security strategy, posture, and squad partnership with our Engineering Director)
- Technical Session (Live technical exercise with Platform & Engineering team members)
- Final Chat with our Chief Product & Tech Officer
(Need interview adjustments? Just let us know in your application, we're happy to support you however you need.)
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location