Senior Staff Security Engineer

About the role

Bloomreach is seeking a Senior Staff Security Engineer to own and evolve the security posture of its cloud infrastructure and AI‑enabled products. You will design secure architectures, lead incident response, and mentor junior engineers while ensuring the platform remains resilient against emerging threats.

Key responsibilities

• Design and implement secure AWS and GCP architectures, perform threat modeling, and create validated IaC templates.
• Own SIEM deployment, configuration, tuning, and detection rule authoring; maintain SLA‑driven alerting and incident workflows.
• Identify, triage, and remediate infrastructure and web vulnerabilities; manage the full CVE lifecycle and patching processes.
• Design and manage network, web, and endpoint protections including firewalls, WAFs, cloud network controls, and URL/web filtering.
• Develop automation for detection, alert enrichment, and remediation using scripting or custom tooling.
• Lead incident triage, engage external researchers, and drive root‑cause analysis and MTTR improvements.
• Mentor junior staff and contribute to secure, scalable approaches for new AI‑driven capabilities.

Required profile

• 6+ years of experience in cloud, network, and application security.
• Proven ability to communicate across cross‑functional teams and with external partners.
• Experience mentoring junior engineers.

Required skills

• Hands‑on security for AWS and GCP.
• Threat modeling and secure IaC design.
• SIEM deployment, tuning, and detection rule creation.
• Vulnerability management and CVE lifecycle handling.
• Network security controls: firewalls, WAF, URL/web filtering.
• Scripting/automation (e.g., Python, Bash) for security tooling.
• Incident response and remediation processes.