DevSecOps Lead

About the role

Syncron is seeking a hands‑on DevSecOps Lead to shape the security and reliability of its cloud‑native SaaS platform. You will drive security integration across the product lifecycle, work closely with engineering and product teams, and champion a security‑first culture.

Key responsibilities

• Lead DevSecOps practices across multiple engineering squads.
• Embed, maintain and optimise security controls in CI/CD pipelines for cloud‑native and AI‑driven projects.
• Design and evolve secure, high‑availability AWS architectures for multi‑tenant SaaS services.
• Partner with product, engineering and AWS security teams to shift security left and improve developer experience.
• Conduct threat modelling, risk assessments and security reviews for new and existing services.
• Automate security and compliance processes using AI and infrastructure‑as‑code.
• Foster a strong security‑first engineering culture.

Required profile

• Strong hands‑on experience with AWS services (IAM, VPC, Security Groups, EKS/ECS, Lambda, CloudWatch, etc.).
• Proven experience securing cloud‑native and SaaS platforms, preferably multi‑tenant.
• Deep understanding of DevSecOps principles and CI/CD security integration.
• Experience with IaC tools such as Terraform or CloudFormation.
• Knowledge of application security techniques (SAST, DAST, dependency scanning, SBOMs).
• Solid grasp of identity and access management and least‑privilege concepts.
• Excellent communication skills in English and ability to work with cross‑functional teams.

Required skills

• AWS (IAM, VPC, Security Groups, EKS, ECS, Lambda, CloudWatch)
• Terraform / CloudFormation (IaC)
• CI/CD pipeline security
• SAST, DAST, dependency scanning, SBOM generation
• Identity & Access Management, least‑privilege design
• Docker and Kubernetes container security
• Automation and scripting for security controls