Senior Cloud Security Engineer

About the role

Bloomreach is seeking a Senior Cloud Security Engineer to act as a trusted security partner for Engineering, DevOps, and IT. You will design and harden secure AWS environments, protect containerized workloads, and secure corporate infrastructure while collaborating closely with the SOC team.

Key responsibilities

• Design, implement, and monitor security controls across AWS using native services such as IAM, GuardDuty, Security Hub, KMS, VPC, and Config.
• Secure Linux servers and containerized workloads (Docker, Kubernetes) through host hardening, image security, and cluster configuration.
• Administer Splunk for log ingestion, data pipelines, and platform health in partnership with the SOC.
• Lead vulnerability and CVE lifecycle management, including triage, root‑cause analysis, patching, and remediation metrics.
• Develop policy‑as‑code and security guardrails within IaC and CI/CD pipelines, enforcing static scans before deployment.

Required profile

• 6+ years of hands‑on cybersecurity engineering experience, focusing on cloud and infrastructure security.
• Deep expertise securing AWS environments and applying native security services.
• Strong Linux administration skills and experience with Docker and Kubernetes security.
• Proven experience with identity/access tools such as JumpCloud and zero‑trust solutions like Twingate.
• Ability to mentor junior engineers and drive security initiatives based on risk.

Required skills

• AWS (IAM, GuardDuty, Security Hub, KMS, Config, Inspector)
• Linux system hardening
• Docker, Kubernetes
• JumpCloud, Twingate
• Splunk administration
• Python, Go, Bash scripting
• Infrastructure as Code (IaC) and CI/CD pipelines
• Policy‑as‑code implementation