DevSecOps Lead

Syncron is a leading SaaS company with over 20 years of experience, specializing in aftermarket solutions. Their Service Lifecycle Management Platform offers domain-fit solutions for supply chain optimization, pricing strategy, and service fulfillment including warranty management, field service management, service parts management, and knowledge management. The company has a global presence with offices in the US, UK, Germany, France, Italy, Japan, Poland, India, and group headquarters in Sweden.

• Strong hands-on experience with AWS (IAM, VPC, Security Groups, EKS/ECS, Lambda, CloudWatch, etc.)
• Experience securing cloud-native and SaaS platforms (multi-tenant environments is a plus)
• Deep understanding of DevSecOps practices and integrating security into CI/CD pipelines
• Experience with tools such as Terraform, CloudFormation or other IaC frameworks
• Knowledge of application security (SAST, DAST, dependency scanning, SBOMs)
• Strong understanding of identity, access management and least-privilege principles
• Experience working with cross-functional teams and influencing engineering practices
• Excellent communication skills in English

Nice to have:

• Experience with product and AI security in a B2B SaaS environment
• Familiarity with security frameworks (ISO27001, SOC2, NIST)
• Experience building secure CI/CD pipelines at scale
• Experience with container security (Docker, Kubernetes) and runtime protection
• Strong automation mindset with scripting (Python, Bash or similar)

• Act as a technical leader driving DevSecOps practices across engineering teams
• Embed, maintain, and optimise security into CI/CD pipelines and product development workflows for cloud-native and AI-driven projects
• Design and evolve secure AWS architectures supporting high-availability SaaS products
• Partner with product and engineering teams to shift security left and improve developer experience
• Partner with AWS security and account teams to implement and track security checks and best practices (e.g. ESSR findings, AWS Security Hub, AWS Guard Duty)
• Lead threat modelling, risk assessments, and security reviews for new and existing services
• Drive automation and AI across infrastructure, security controls, and compliance processes
• Build and promote a strong security-first engineering culture