Bloomreach

Bloomreach

Bloomreach provides an AI-powered cloud marketing platform that delivers real-time personalization by analyzing big data to enhance customer experiences and drive revenue growth across various industries.

Internet Software & Services
251-1K
Founded 2009
$452M raised

Description

  • Design, implement, and monitor AWS security controls using services such as IAM, GuardDuty, Security Hub, KMS, VPC, and Config.
  • Secure Linux servers and Docker/Kubernetes workloads through host, image, runtime, cluster, and workload hardening.
  • Own security configuration for corporate infrastructure, identity, and zero-trust access tooling such as JumpCloud and Twingate.
  • Administer Splunk by onboarding log sources, maintaining data pipelines, and supporting platform health and licensing.
  • Identify, triage, and remediate infrastructure and web application vulnerabilities while improving MTTR and remediation rates.
  • Lead CVE lifecycle management, patching, root-cause analysis, and remediation reporting.
  • Build security automation and remediation tooling using Python, Go, Bash, or similar languages.
  • Implement policy-as-code, IaC scanning, security guardrails, and deployment baselines within CI/CD pipelines.
  • Define infrastructure logging and telemetry requirements to support SOC detection coverage.
  • Develop security architecture standards, support incident response, mentor junior engineers, and prioritize security initiatives by risk and business impact.

Requirements

  • 6+ years of hands-on cybersecurity engineering experience focused on cloud security, infrastructure security, and system hardening.
  • Deep experience securing AWS environments, including IAM and services such as GuardDuty, Security Hub, KMS, Config, and Inspector.
  • Strong Linux administration and hardening experience, including Docker and Kubernetes security.
  • Experience securing corporate infrastructure and identity/access platforms such as JumpCloud, Twingate, or comparable tools.
  • Experience administering and integrating Splunk or comparable SIEM/data platforms.
  • Proven ownership of vulnerability and CVE management, including triage, patching, root-cause analysis, and MTTR reporting.
  • Proficiency with Python, Go, Bash, or similar scripting languages for security automation.
  • Experience with policy-as-code, CI/CD security guardrails, and static IaC scanning.
  • Working knowledge of CIS and NIST frameworks and common infrastructure, container, and web application weaknesses.
  • Strong cross-functional communication and mentoring experience; AWS Security Specialty, CKS, CISSP, CCSP, or CCSK certifications preferred.

Benefits

  • Base salary range of 858,667–1,073,333 CZK.
  • Virtual-first work environment with flexible working hours and global hubs.
  • Restricted stock units or stock options, plus a company performance bonus.
  • $1,500 annual professional education budget for books, courses, and certifications.
  • Employee Assistance Program, Calm subscription, sports, yoga, and meditation opportunities.
  • Quarterly additional DisConnect days and extended parental leave of up to 26 weeks for primary caregivers.
  • Five paid volunteer days annually and an employee referral bonus of up to $3,000.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

(EG0068) IAM Developer

Nortal 251-1K Internet Software & Services

Nortal is seeking an IAM Developer to design, implement, and maintain identity and access management solutions that protect digital identities, streamline access, and strengthen cybersecurity for global enterprise clients.

Cybersecurity Java .NET Node.js SAML
1 hour, 39 minutes ago

Senior Security Engineer

Cision 5K-10K Professional Services

Cision is hiring a Senior Security Engineer to monitor, investigate, and respond to security activity across its cloud, identity, endpoint, network, and Linux environments.

Active Directory AWS Bash GitHub GitLab Kubernetes Linux Network Security PowerShell Python SIEM Splunk
1 day, 1 hour ago

Sr. Security Software Engineer, Security Operations

Pinterest 5K-10K Internet Software & Services

Pinterest is hiring a Senior Security Software Engineer to lead Security Operations platforms that govern cloud infrastructure, automate vulnerability remediation and compliance, and integrate security controls into engineering workflows.

AWS System Design Terraform
1 day, 2 hours ago

Detection Engineer, Protective Services

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Detection Engineer for its Protective Services team to build and operate cross-domain detection capabilities that identify, investigate, and prioritize threats to protected individuals and company operations.

Go Machine Learning Python Snowflake SQL
2 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers