Senior Cloud Security Engineer

Bloomreach

. Serve as a trusted security partner to Engineering, DevOps, and IT .

Posted 11/3/2026full-timeRemote • SlovakiaSenior💰 €38,095 - €47,619 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security and infrastructure hardening, with a strong focus on AWS security services, vulnerability management, and secure automation. Proficient in mentoring junior engineers and collaborating with cross-functional teams to prioritize security initiatives based on risk and business impact.

Highest-signal resume keywords

AWS Security ServicesVulnerability ManagementLinux System AdministrationPython ScriptingSplunk Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityInfrastructure SecuritySystem HardeningDocker SecurityKubernetes SecurityPolicy-as-Code ImplementationStatic IaC ScanningCVE Lifecycle ManagementSecurity Architecture DesignIncident Response

Soft Skills

MentoringCollaborationRisk AssessmentPrioritization

Tools & Technologies

IAMGuardDutySecurity HubKMSVPCJumpCloudTwingateSplunkCI/CD PipelinesSecurity Frameworks

Certifications & Qualifications

AWS Certified Security – SpecialtyCKSCISSPCCSPCCSK

Industry Keywords

Cybersecurity EngineeringZero-TrustSIEMCISNIST

Tech Stack

Tools & technologies

AWSCloudCyber SecurityDockerKubernetesLinuxPythonSplunkGo

About the role

Key responsibilities & impact

Serve as a trusted security partner to Engineering, DevOps, and IT
Design, implement, and monitor security controls across AWS infrastructure using IAM, GuardDuty, Security Hub, KMS, VPC/Security Groups, and Config
Evaluate AWS security services and strengthen security architecture
Secure Linux servers and Docker/Kubernetes workloads through host hardening, image and runtime security, and cluster/workload configuration
Own security configuration and administration of corporate infrastructure, JumpCloud, and Twingate
Administer and integrate Splunk, onboard log sources, maintain data pipelines, and support platform health and licensing
Identify, triage, and remediate infrastructure and web-application vulnerabilities
Lead CVE lifecycle management and patching, including root cause analysis and remediation metrics
Build secure automation and tooling for vulnerability remediation and infrastructure hardening using Python, Go, Bash, or similar
Implement policy-as-code, security guardrails, static IaC scanning, and CI/CD security baselines
Define logging and telemetry requirements for cloud, container, and corporate infrastructure
Develop and operationalize security architecture standards
Partner with the SOC team on incident response as a technical subject-matter expert
Mentor junior security engineers and prioritize initiatives based on risk and business impact
Complete 30-, 60-, and 90-day objectives including AWS and infrastructure onboarding, vulnerability remediation, Splunk data-source integration, IaC security enforcement, architecture reviews, hardening, and roadmap prioritization

Requirements

What you’ll need

6+ years of hands-on experience in cybersecurity engineering, focused on cloud security, infrastructure security, and system hardening
Deep, hands-on experience securing AWS environments, including secure architecture design, IAM, GuardDuty, Security Hub, KMS, Config, and Inspector
Strong knowledge of Linux system administration and hardening
Hands-on experience securing Docker and Kubernetes environments
Experience securing corporate infrastructure and identity/access tooling such as JumpCloud, Twingate, or comparable zero-trust/IAM platforms
Experience administering and integrating Splunk or comparable data/SIEM platforms, including data-source onboarding and platform health
Ownership of vulnerability and CVE lifecycle management, including triage, root cause analysis, patching, and MTTR/remediation-rate reporting
Proficiency in Python, Go, Bash, or similar scripting languages
Experience implementing policy-as-code and security guardrails in CI/CD pipelines, including static IaC scanning and pre-deployment security baselines
Working knowledge of CIS and NIST security frameworks and infrastructure, container, and web-application weaknesses
Experience partnering with SOC, engineering, and IT teams
Experience mentoring junior engineers and prioritizing security work based on risk and business impact
Relevant certifications preferred: AWS Certified Security – Specialty, CKS, CISSP, CCSP, or CCSK

Benefits

Comp & perks

A great deal of freedom and trust; no clocking in and out, corporate rules, or long approval processes
Flexible working hours
Virtual-first work with Bloomreach Hubs across three continents
Company events
5 paid days off to volunteer
People Development Program and personal development workshops
Communication coach support
Leader Development Program with feedback, coaching, and check-ins
$1,500 annual professional education budget for books, courses, certifications, etc.
Employee Assistance Program with counselors
Calm subscription
One additional DisConnect day off each quarter
Sports, yoga, and meditation opportunities
Extended parental leave up to 26 calendar weeks for Primary Caregivers
Restricted Stock Units or Stock Options, depending on role, seniority, and location
Company performance bonus
Employee referral bonus of up to $3,000
Work anniversary rewards