Senior Cloud Security Engineer

This is a fully remote position, open to applicants in Slovakia.

📋 Description

• Act as a reliable security partner for Engineering, DevOps, and IT teams.

• Design, implement, and supervise security measures across AWS infrastructure utilizing IAM, GuardDuty, Security Hub, KMS, VPC/Security Groups, and Config.

• Assess AWS security services and enhance the security architecture.

• Secure Linux servers and Docker/Kubernetes workloads through host hardening, image and runtime security, as well as cluster/workload configuration.

• Manage the security configuration and administration of corporate infrastructure, JumpCloud, and Twingate.

• Oversee and integrate Splunk, onboard log sources, maintain data pipelines, and ensure the health and licensing of the platform.

• Identify, triage, and resolve infrastructure and web-application vulnerabilities.

• Lead the management of the CVE lifecycle and patching, including root cause analysis and remediation metrics.

• Create secure automation and tools for vulnerability remediation and infrastructure hardening using Python, Go, Bash, or similar languages.

• Implement policy-as-code, establish security guardrails, perform static IaC scanning, and set CI/CD security baselines.

• Define logging and telemetry requirements for cloud, container, and corporate infrastructure.

• Develop and operationalize security architecture standards.

• Collaborate with the SOC team on incident response as a technical subject matter expert.

• Mentor junior security engineers and prioritize initiatives based on risk and business impact.

• Complete 30-, 60-, and 90-day objectives, including AWS and infrastructure onboarding, vulnerability remediation, Splunk data-source integration, IaC security enforcement, architecture reviews, hardening, and roadmap prioritization.

⛳️ Requirements

• A minimum of 6 years of practical experience in cybersecurity engineering with a focus on cloud security, infrastructure security, and system hardening.

• Extensive hands-on experience securing AWS environments, including secure architecture design, IAM, GuardDuty, Security Hub, KMS, Config, and Inspector.

• Strong understanding of Linux system administration and hardening techniques.

• Practical experience securing Docker and Kubernetes environments.

• Experience in securing corporate infrastructure and identity/access management tools such as JumpCloud, Twingate, or similar zero-trust/IAM platforms.

• Experience managing and integrating Splunk or similar data/SIEM platforms, including data-source onboarding and platform health maintenance.

• Responsible for vulnerability and CVE lifecycle management, encompassing triage, root cause analysis, patching, and MTTR/remediation-rate reporting.

• Proficiency in scripting languages such as Python, Go, Bash, or similar.

• Experience implementing policy-as-code and security guardrails within CI/CD pipelines, including static IaC scanning and pre-deployment security baselines.

• Familiarity with CIS and NIST security frameworks and knowledge of infrastructure, container, and web-application vulnerabilities.

• Experience collaborating with SOC, engineering, and IT teams.

• Experience mentoring junior engineers and prioritizing security tasks based on risk and business impact.

• Relevant certifications preferred: AWS Certified Security – Specialty, CKS, CISSP, CCSP, or CCSK.

🏝️ Benefits

• A high level of autonomy and trust; no need for clocking in and out, corporate regulations, or lengthy approval processes.

• Flexible working hours.

• Virtual-first work environment with Bloomreach Hubs located across three continents.

• Company-sponsored events.

• Five paid days off for volunteering activities.

• People Development Program along with personal development workshops.

• Support from communication coaches.

• Leader Development Program that includes feedback, coaching, and regular check-ins.

• An annual professional education budget of $1,500 for books, courses, certifications, etc.

• Employee Assistance Program offering counseling services.

• Subscription to Calm.

• One additional DisConnect day off each quarter.

• Opportunities for sports, yoga, and meditation.

• Extended parental leave of up to 26 calendar weeks for Primary Caregivers.

• Restricted Stock Units or Stock Options, based on role, seniority, and location.

• Company performance bonus.

• Employee referral bonus of up to $3,000.

• Rewards for work anniversaries.