Senior Cloud Security Engineer

Bloomreach

. Serve as a trusted security partner to Engineering, DevOps, and IT .

Posted 11/3/2026full-timeRemote • CzechiaSenior💰 CZK 858,667 - CZK 1,073,333 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cloud security, particularly within AWS environments, focusing on secure architecture design, vulnerability management, and automation using scripting languages. Proven ability to mentor junior engineers and collaborate effectively with cross-functional teams to prioritize security initiatives based on risk and business impact.

Highest-signal resume keywords

AWS Security Controls ImplementationLinux System AdministrationContainer Security with Docker and KubernetesVulnerability Management and CVE LifecycleScripting Proficiency in Python, Go, or Bash

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS IAMAWS GuardDutyAWS Security HubAWS KMSAWS ConfigDocker SecurityKubernetes SecuritySplunk AdministrationPolicy-as-Code ImplementationIaC Security Scanning

Soft Skills

Cross-Functional CommunicationMentoring Junior Engineers

Tools & Technologies

JumpCloudTwingateSIEM PlatformsSecurity Automation ToolsIncident Response Tools

Certifications & Qualifications

AWS Certified Security – SpecialtyCKSCISSPCCSPCCSK

Industry Keywords

Cybersecurity EngineeringCloud SecurityInfrastructure SecuritySystem HardeningCIS FrameworkNIST Framework

Tech Stack

Tools & technologies

AWSCloudCyber SecurityDockerKubernetesLinuxPythonSplunkGo

About the role

Key responsibilities & impact

Serve as a trusted security partner to Engineering, DevOps, and IT
Design, implement, and monitor AWS security controls using IAM, GuardDuty, Security Hub, KMS, VPC/Security Groups, and Config
Evaluate AWS security services and strengthen cloud security architecture
Secure Linux servers and Docker/Kubernetes workloads through host hardening, image/runtime security, and cluster/workload configuration
Own corporate infrastructure security, including JumpCloud and Twingate administration
Administer and integrate Splunk, onboard log sources, maintain data pipelines, and support platform health and licensing
Identify, triage, and drive remediation of infrastructure and web application vulnerabilities
Lead CVE lifecycle management, patching, root cause analysis, and remediation metrics tracking
Build secure automation and tooling with Python, Go, Bash, or similar scripting languages
Implement policy-as-code, IaC security scanning, and CI/CD security baselines
Define logging and telemetry requirements for cloud, container, and corporate infrastructure
Develop and operationalize security architecture standards
Partner with the SOC team on incident response as a technical subject-matter expert
Mentor junior security engineers and prioritize security initiatives based on risk and business impact
Deliver 30-, 60-, and 90-day objectives including vulnerability remediation, Splunk integration, IaC guardrails, security architecture reviews, hardening, and roadmap contributions

Requirements

What you’ll need

6+ years of hands-on experience in cybersecurity engineering, focused on cloud security, infrastructure security, and system hardening
Deep hands-on experience securing AWS environments, including secure architecture design, IAM, GuardDuty, Security Hub, KMS, Config, and Inspector
Strong Linux system administration and hardening experience
Hands-on experience securing containerized environments with Docker and Kubernetes
Experience securing corporate infrastructure and identity/access tooling such as JumpCloud, Twingate, or comparable zero-trust/IAM platforms
Experience administering and integrating Splunk or comparable data/SIEM platforms, including onboarding data sources and maintaining platform health
Ownership of vulnerability and CVE lifecycle management, including triage, root cause analysis, patching, and MTTR/remediation-rate reporting
Proficiency in Python, Go, Bash, or similar scripting languages
Experience implementing policy-as-code and security guardrails within CI/CD pipelines, including static IaC scanning and pre-deployment security baselines
Working knowledge of CIS and NIST security frameworks and weaknesses in infrastructure, containers, and web applications
Strong cross-functional communication skills and experience partnering with SOC, engineering, and IT teams
Experience mentoring junior engineers and prioritizing security work based on risk and business impact
Relevant certifications preferred: AWS Certified Security – Specialty, CKS, CISSP, CCSP, or CCSK

Benefits

Comp & perks

A great deal of freedom and trust; no clocking in/out, corporate rules, or long approval processes
Flexible working hours
Virtual-first work model with Bloomreach Hubs across three continents
Company events
5 paid days off to volunteer
People Development Program with personal development workshops
Communication coach support
Leader Development Program with feedback, coaching, and check-ins
$1,500 annual professional education budget for books, courses, certifications, etc.
Employee Assistance Program with counselors
Calm subscription
One additional DisConnect day off each quarter
Sports, yoga, and meditation opportunities
Extended parental leave up to 26 calendar weeks for Primary Caregivers
Restricted Stock Units or Stock Options, depending on role, seniority, and location
Company performance bonus
Employee referral bonus up to $3,000
Work anniversary rewards and celebrations