DevSecOps Lead

Syncron is a leading SaaS company with over 20 years of experience, specializing in aftermarket solutions. Our Service Lifecycle Management Platform offers domain-fit solutions for:

• Supply Chain optimization,

• Pricing strategy,

• Service Fulfillment (e.g. warranty management, field service management, service parts management, knowledge management).

Our company has a global presence with offices in US, UK, Germany, France, Italy, Japan, Poland, India and group headquarters in Sweden.

We build upon the belief that our greatest strength is our People. Our unique company culture has been appreciated by our Employees.

With this we are winning the hearts and minds of world-leading organizations, such as JCB, Kubota, Electrolux, Toyota, Renault and Hitachi.

About the role

We are looking for a driven DevSecOps Lead to join our engineering organization and help shape how we build, secure and operate cloud-native products at scale.

You are a hands-on leader passionate about building secure, scalable, and high-performing platforms. You combine deep AWS expertise with strong product security principles, embedding security into every stage of the development lifecycle.

What would you do?

• Act as a technical leader driving DevSecOps practices across engineering teams

• Embed, maintain and optimise security into CI/CD pipelines and product development workflows for cloud-native and AI-driven projects

• Design and evolve secure AWS architectures supporting high-availability SaaS products

• Partner with product and engineering teams to shift security left and improve developer experience

• Partner with AWS security and account teams to implement and track security checks and best practices (e.g. ESSR findings, AWS Security Hub, AWS Guard Duty etc.)

• Lead threat modelling, risk assessments and security reviews for new and existing services

• Drive automation and AI across infrastructure, security controls and compliance processes

• Build and promote a strong security-first engineering culture

Who you are? / What we expect:

• Strong hands-on experience with AWS (IAM, VPC, Security Groups, EKS/ECS, Lambda, CloudWatch, etc.)

• Experience securing cloud-native and SaaS platforms (multi-tenant environments is a plus)

• Deep understanding of DevSecOps practices and integrating security into CI/CD pipelines

• Experience with tools such as Terraform, CloudFormation or other IaC frameworks

• Knowledge of application security (SAST, DAST, dependency scanning, SBOMs)

• Strong understanding of identity, access management and least-privilege principles

• Experience working with cross-functional teams and influencing engineering practices

• Excellent communication skills in English

The icing on the cake:

• Experience with product and AI security in a B2B SaaS environment

• Familiarity with security frameworks (ISO27001, SOC2, NIST)

• Experience building secure CI/CD pipelines at scale

• Experience with container security (Docker, Kubernetes) and runtime protection

• Strong automation mindset with scripting (Python, Bash or similar)

• Experience with container security (Docker, Kubernetes) and runtime protection

We offer:

• A collaborative, low-ego environment where you can make a real impact

• Lots of super interesting projects

• Scandinavian culture with strong focus on work-life balance

• Opportunities for growth, learning and professional development

• International and English-speaking workplace

• Flexible working setup, work from one of our exquisite offices or from home

• Training budget and conference participation

Unsure if you meet all the job requirements but passionate about the role? Apply anyway! Syncron values diversity and welcomes all Candidates, even those with non-traditional backgrounds. We believe in transferable skills and a shared passion for success!

#LI-SYNCRON
#LI-Remote
#LI-Hybrid