Senior Staff Security Infrastructure Engineer
Bloomreach7 months ago
Responsibilities
- Own current and target-state security data architectures and reporting.
- Design, implement, validate, and monitor cloud infrastructure security controls across AWS and GCP.
- Deploy, secure, configure, operate, and maintain SIEM and other security resources.
- Author and test detection rules and playbooks, integrate telemetry sources, and operate incident workflows.
- Identify, triage, remediate, and manage the lifecycle of infrastructure and web vulnerabilities and CVEs.
- Design and manage firewalls, WAFs, cloud network controls, URL filtering, web protections, and endpoint protections.
- Build security automation and tooling for detection, alert enrichment, and remediation.
- Implement secure infrastructure-as-code practices, CI pipeline guardrails, policy-as-code, and static IaC scanning.
- Define logging and telemetry requirements and validate coverage and detection effectiveness for critical assets.
- Develop and operationalize organization-wide security standards, runbooks, and playbooks.
- Apply threat modeling and adversary-focused testing to guide defensive controls and resilient designs.
- Lead incident triage, vulnerability disclosure, and external security researcher engagement.
- Communicate with engineering teams, leadership, external researchers, and customers.
- Mentor junior engineers and drive continuous improvement of the infrastructure security posture.
Requirements
- At least 6 years of relevant experience.
- Proficiency in cloud security, network security, URL filtering, common security frameworks, and CVE lifecycle management.
- Hands-on AWS and GCP security experience, including threat modeling, platform-native controls, secure architectures, and secure infrastructure as code.
- Experience deploying, configuring, tuning, and maintaining SIEM systems; authoring detection rules and playbooks; integrating data sources; and operating SLA-driven alerting and incident workflows.
- Experience identifying, triaging, and remediating infrastructure and web vulnerabilities, including root cause analysis and patching.
- Operational experience with firewalls, WAFs, cloud network controls, URL/web filtering, and endpoint protections.
- Practical infrastructure-as-code and scripting experience using Python, Go, Bash, or similar languages.
- Experience building security automation for detection, alert enrichment, and remediation.
- Experience implementing CI pipeline guardrails, policy-as-code, static infrastructure-as-code scanning, and security baselines.
- Knowledge of logging, telemetry, observability, detection efficacy, alert fidelity, CIS, NIST, common security libraries, and infrastructure and web application weaknesses.
- Strong cross-functional and external communication skills, including vulnerability disclosure and researcher engagement.
- Experience mentoring junior engineers and prioritizing security projects based on risk and business impact.
- Relevant certifications include AWS Certified Security, Google Professional Cloud Security Engineer, Splunk Certified Admin, Splunk Certified Enterprise Security Admin, CISSP, CCSP, or Cloud Security Alliance CCSK.
Benefits
- Full-time role based in Central Europe offices in Bratislava, Brno, or Prague, or remote from Central and Eastern Europe.
- Virtual-first work environment with flexible working hours and access to Bloomreach hubs.
- Five paid days off for volunteering.
- Personal development workshops and leadership development programs.
- Employee Assistance Program, Calm subscription, sports, yoga, and meditation opportunities.
- Quarterly company-wide DisConnect days and extended parental leave up to 26 calendar weeks for primary caregivers.
- Company events and employee referral and work-anniversary recognition programs.
Tech Stack
Categories
About Bloomreach
Bloomreach personalizes the customer experience for more than 1,400 global brands through Loomi, its agentic personalization platform. With apps spanning email, web, ads, search, and more — and agents spanning marketing and conversational shopping — Loomi brings real-time personalization to life at every customer touchpoint.