Senior Security Engineer (Cloud & Infrastructure)

About the role

Bloomreach is seeking a Senior Security Engineer to act as a trusted security partner for Engineering, DevOps, and IT. You will design, harden, and monitor secure AWS environments, protect Linux and container workloads, and collaborate closely with the SOC team on detection and response.

Key responsibilities

• Design, implement, and monitor security controls across AWS using native services such as IAM, GuardDuty, Security Hub, KMS, Config, and Inspector.
• Secure Linux servers and containerized workloads (Docker, Kubernetes) through host hardening, image security, and cluster configuration.
• Own corporate infrastructure security, including identity and access tooling (JumpCloud) and zero‑trust network access (Twingate).
• Administer and integrate Splunk as a log and data platform, onboarding new sources and maintaining pipelines.
• Identify, triage, and remediate infrastructure and web‑application vulnerabilities, driving CVE lifecycle management and patching.
• Build automation and tooling for remediation using Python, Go, or Bash, and enforce policy‑as‑code in IaC and CI/CD pipelines.
• Define logging and telemetry requirements to ensure SOC coverage and develop security architecture standards.
• Mentor junior security engineers and prioritize initiatives based on risk and business impact.

Required profile

• 6+ years of hands‑on cybersecurity engineering experience, with deep expertise in AWS security and Linux/container hardening.
• Proven track record of vulnerability management, CVE lifecycle ownership, and incident response collaboration.
• Strong communication skills and experience mentoring junior engineers.

Required skills

• AWS (IAM, GuardDuty, Security Hub, KMS, Config, Inspector)
• Linux system administration and hardening
• Docker and Kubernetes security
• JumpCloud, Twingate (zero‑trust/IAM)
• Splunk (or comparable SIEM) administration
• Python, Go, Bash scripting
• Infrastructure as Code (IaC) and CI/CD pipeline security
• Policy‑as‑code, static IaC scanning
• Security frameworks (CIS, NIST)