Senior Cloud Security Engineer

This is a fully remote position, open to applicants in Czechia.

📋 Description

• Act as a reliable security partner for Engineering, DevOps, and IT teams.

• Design, implement, and oversee AWS security measures utilizing IAM, GuardDuty, Security Hub, KMS, VPC/Security Groups, and Config.

• Assess AWS security services to enhance cloud security architecture.

• Secure Linux servers and Docker/Kubernetes workloads via host hardening, image/runtime security, and proper cluster/workload configuration.

• Manage corporate infrastructure security, including administration of JumpCloud and Twingate.

• Oversee and integrate Splunk, onboard log sources, sustain data pipelines, and ensure platform health and compliance.

• Detect, prioritize, and drive the resolution of infrastructure and web application vulnerabilities.

• Lead the management of CVE lifecycles, including patching, root cause analysis, and tracking remediation metrics.

• Create secure automation and tools using Python, Go, Bash, or similar scripting languages.

• Execute policy-as-code, IaC security scanning, and establish CI/CD security standards.

• Specify logging and telemetry needs for cloud, container, and corporate infrastructure.

• Develop and operationalize security architecture standards.

• Collaborate with the SOC team on incident response as a technical subject-matter expert.

• Guide junior security engineers and prioritize security initiatives based on risk and business implications.

• Deliver 30-, 60-, and 90-day goals, including vulnerability remediation, Splunk integration, IaC guardrails, security architecture reviews, hardening, and contributing to the roadmap.

⛳️ Requirements

• Over 6 years of practical experience in cybersecurity engineering, focusing on cloud security, infrastructure security, and system hardening.

• Extensive hands-on experience securing AWS environments, including secure architecture design, IAM, GuardDuty, Security Hub, KMS, Config, and Inspector.

• Strong experience in Linux system administration and hardening.

• Hands-on experience in securing containerized environments using Docker and Kubernetes.

• Experience in securing corporate infrastructure and identity/access tools such as JumpCloud, Twingate, or similar zero-trust/IAM platforms.

• Proven experience in administering and integrating Splunk or similar data/SIEM platforms, including onboarding data sources and maintaining platform health.

• Ownership of vulnerability and CVE lifecycle management, including triage, root cause analysis, patching, and reporting on MTTR/remediation rates.

• Proficient in Python, Go, Bash, or similar scripting languages.

• Experience implementing policy-as-code and security guardrails within CI/CD pipelines, including static IaC scanning and pre-deployment security standards.

• Familiarity with CIS and NIST security frameworks, along with known weaknesses in infrastructure, containers, and web applications.

• Excellent cross-functional communication skills and experience collaborating with SOC, engineering, and IT teams.

• Experience mentoring junior engineers and prioritizing security projects based on risk and business impact.

• Relevant certifications are preferred: AWS Certified Security – Specialty, CKS, CISSP, CCSP, or CCSK.

🏝️ Benefits

• Enjoy significant freedom and trust; no mandatory clocking in/out, corporate rules, or lengthy approval processes.

• Flexible working hours.

• A virtual-first work model with Bloomreach Hubs located across three continents.

• Participation in company events.

• 5 paid days off for volunteering.

• People Development Program featuring personal development workshops.

• Access to communication coaching support.

• Leader Development Program that includes feedback, coaching, and regular check-ins.

• An annual professional education budget of $1,500 for books, courses, certifications, etc.

• Employee Assistance Program providing access to counselors.

• Calm subscription offered to employees.

• One additional DisConnect day off each quarter.

• Opportunities for sports, yoga, and meditation.

• Extended parental leave of up to 26 calendar weeks for Primary Caregivers.

• Eligibility for Restricted Stock Units or Stock Options, based on role, seniority, and location.

• Company performance bonuses available.

• Employee referral bonuses up to $3,000.

• Rewards and celebrations for work anniversaries.