DevSecOps Lead

Syncron is a leading SaaS company with over 20 years of experience, specializing in aftermarket solutions. Our Service Lifecycle Management Platform offers domain-fit solutions for:Supply Chain optimization,Pricing strategy,Service Fulfillment (e.g. warranty management, field service management, service parts management, knowledge management).Our company has a global presence with offices in US, UK, Germany, France, Italy, Japan, Poland, India and group headquarters in Sweden.We build upon the belief that our greatest strength is our People. Our unique company culture has been appreciated by our Employees.With this we are winning the hearts and minds of world-leading organizations, such as JCB, Kubota, Electrolux, Toyota, Renault and Hitachi. About the roleWe are looking for a driven DevSecOps Lead to join our engineering organization and help shape how we build, secure and operate cloud-native products at scale.You are a hands-on leader passionate about building secure, scalable, and high-performing platforms. You combine deep AWS expertise with strong product security principles, embedding security into every stage of the development lifecycle.What would you do?Act as a technical leader driving DevSecOps practices across engineering teams Embed, maintain and optimise security into CI/CD pipelines and product development workflows for cloud-native and AI-driven projects Design and evolve secure AWS architectures supporting high-availability SaaS products Partner with product and engineering teams to shift security left and improve developer experience Partner with AWS security and account teams to implement and track security checks and best practices (e.g. ESSR findings, AWS Security Hub, AWS Guard Duty etc.) Lead threat modelling, risk assessments and security reviews for new and existing services Drive automation and AI across infrastructure, security controls and compliance processes Build and promote a strong security-first engineering culture Who you are? / What we expect:Strong hands-on experience with AWS (IAM, VPC, Security Groups, EKS/ECS, Lambda, CloudWatch, etc.)Experience securing cloud-native and SaaS platforms (multi-tenant environments is a plus)Deep understanding of DevSecOps practices and integrating security into CI/CD pipelinesExperience with tools such as Terraform, CloudFormation or other IaC frameworksKnowledge of application security (SAST, DAST, dependency scanning, SBOMs)Strong understanding of identity, access management and least-privilege principlesExperience working with cross-functional teams and influencing engineering practicesExcellent communication skills in EnglishThe icing on the cake:Experience with product and AI security in a B2B SaaS environmentFamiliarity with security frameworks (ISO27001, SOC2, NIST)Experience building secure CI/CD pipelines at scaleExperience with container security (Docker, Kubernetes) and runtime protectionStrong automation mindset with scripting (Python, Bash or similar)Experience with container security (Docker, Kubernetes) and runtime protectionWe offer:A collaborative, low-ego environment where you can make a real impactLots of super interesting projectsScandinavian culture with strong focus on work-life balanceOpportunities for growth, learning and professional developmentInternational and English-speaking workplaceFlexible working setup, work from one of our exquisite offices or from homeTraining budget and conference participationUnsure if you meet all the job requirements but passionate about the role? Apply anyway! Syncron values diversity and welcomes all Candidates, even those with non-traditional backgrounds. We believe in transferable skills and a shared passion for success!#LI-SYNCRON#LI-Remote#LI-Hybrid