Senior Staff Security Infrastructure Engineer

<div class="content-intro"><div class="p-rich_text_section">Bloomreach is building the world’s premier&nbsp;<strong data-stringify-type="bold">agentic platform for personalization</strong>.We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the&nbsp;<strong data-stringify-type="bold"><em data-stringify-type="italic">entire</em></strong>&nbsp;customer journey.</div> <ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested" data-stringify-type="unordered-list" data-list-tree="true" data-indent="0" data-border="0"> <li data-stringify-indent="0" data-stringify-border="0">We're taking&nbsp;<strong data-stringify-type="bold">autonomous search</strong>&nbsp;mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses.</li> <li data-stringify-indent="0" data-stringify-border="0">We’re making&nbsp;<strong data-stringify-type="bold">conversational shopping</strong>&nbsp;a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey.</li> <li data-stringify-indent="0" data-stringify-border="0">We're designing the future of&nbsp;<strong data-stringify-type="bold">autonomous marketing</strong>, taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do.</li> </ul> <div class="p-rich_text_section">And we're building all of that on the intelligence of a single AI engine —&nbsp;<strong data-stringify-type="bold">Loomi AI</strong>&nbsp;— so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora.</div></div><p>The Senior Staff Security Infrastructure Engineer owns current and target-state data architectures and reporting while also designing, implementing, and monitoring cloud (AWS/GCP) infrastructure security controls; deploying, securing, configuring, and operating SIEM and other security resources; identifying, triaging, and remediating infrastructure and web vulnerabilities; leading incident triage and external-researcher engagement; and mentoring junior staff.</p> <p>You can work in one of our&nbsp;<strong>Central Europe offices (Bratislava, Brno, Prague) or from home in Central and Eastern Europe</strong>&nbsp;on a <strong>full-time basis.</strong></p> <p><strong>Role summary and core responsibilities</strong>&nbsp;</p> <p>6+ years of relevant experience; candidates must demonstrate proficiency in cloud security, network security, URL filtering, common security frameworks, and CVE lifecycle management; practical IaC and scripting for automation; strong cross-functional and external communication; and experience mentoring junior staff.</p> <p><strong>Technical Skills:</strong></p> <ul> <li><strong>Hands-on cloud security for AWS and GCP</strong>: design secure architectures, perform threat modeling, apply platform-native controls, and build/validate secure IaC.</li> <li><strong>SIEM ownership and detection engineering</strong>: deploy, configure, tune, and maintain SIEM; author and test detection rules and playbooks; integrate data sources; and operate with SLA-driven alerting and incident workflows.</li> <li><strong>Vulnerability and incident lifecycle ownership</strong>: identify, triage, and remediate infrastructure and web vulnerabilities&nbsp;</li> <li><strong>Drive CVE lifecycle management and patching</strong>:&nbsp; perform root cause analysis and measure MTTR and remediation rates.</li> <li><strong>Network, web, and endpoint protections</strong>: design and manage firewalls, WAFs, cloud network controls, URL/web filtering, with demonstrable operational experience.</li> <li><strong>Secure automation and tooling</strong>: author automation for detection, alert enrichment, and remediation; build or extend security tooling using scripting or languages such as Python, Go, or Bash.</li> <li><strong>Infrastructure as code and secure CI pipelines</strong>: implement guardrails and policy-as-code in CI/CD pipelines, perform static IaC scanning, and enforce security baselines before deployment.</li> <li><strong>Detection, telemetry, and observability</strong>: define logging and telemetry requirements, ensure coverage for critical assets, and validate detection efficacy and alert fidelity.</li> <li><strong>Security standards, playbooks, and enforcement</strong>: develop, document, and operationalize organization-wide security standards, runbooks, and playbooks; partner with engineering pillars to ensure adoption.</li> <li><strong>Threat-informed defensive engineering</strong>: apply threat modeling and adversary-focused testing to guide controls, detection, and resilient designs.</li> <li><strong>Cross-functional and external communication</strong>: communicate clearly with engineering teams, leadership, external researchers, and customers; lead vulnerability disclosure and researcher engagement.</li> <li><strong>Mentorship and prioritization</strong>: mentor junior engineers, prioritize security projects based on risk and business impact, and drive continuous improvement of infrastructure security posture.</li> <li><strong>Familiarity with frameworks and common weaknesses</strong>: working knowledge of CIS/NIST, common security libraries and controls, and typical flaws exploited in infrastructure and web applications.</li> </ul> <p><strong>Skills and qualifications</strong>:</p> <ul> <li>AWS Certified Security&nbsp;</li> <li>Google Professional Cloud Security Engineer</li> <li>Splunk Certified Admin or Splunk Certified Enterprise Security Admin</li> <li>CISSP (Certified Information Systems Security Professional)</li> <li>Certified Cloud Security Professional (CCSP)</li> <li>Cloud Security Alliance CCSK</li> </ul><div class="content-conclusion"><h2 style="text-align: justify;"><span style="font-size: 18pt;">More things you'll like about Bloomreach:</span></h2> <h3 style="text-align: justify;"><strong>Culture:</strong></h3> <ul> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">A great deal of freedom and trust. At Bloomreach we don’t clock in and out, and we have neither corporate rules nor long approval processes. This freedom goes hand in hand with responsibility. We are interested in results from day one.&nbsp;</span></div> </li> <li> <div><span style="font-weight: 400;">We have defined our </span><a href="https://www.bloomreach.com/en/careers?utm_source=Job-Description-Footer&amp;utm_medium=Job-Description&amp;utm_content=Hyperlink-1" target="_blank"><span style="font-weight: 400;">5 values</span></a><span style="font-weight: 400;"> and the 10 underlying key behaviors that we strongly believe in. We can only succeed if everyone lives these behaviors day to day. We've embedded them in our processes like recruitment, onboarding, feedback, personal development, performance review and internal communication.&nbsp;</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We believe in flexible working hours to accommodate your working style.</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We work virtual-first with several Bloomreach Hubs available across three continents.</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We organize company events to experience the global spirit of the company and get excited about what's ahead.</span></div> </li> <li data-stringify-indent="0" data-stringify-border="0"> <div>We encourage and support our employees to engage in volunteering activities - every Bloomreacher can take 5 paid days off to volunteer*.</div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">The </span><a href="https://www.glassdoor.com/Overview/Working-at-Bloomreach-EI_IE442167.11,21.htm" target="_blank"><span style="font-weight: 400;">Bloomreach Glassdoor page</span></a><span style="font-weight: 400;"> elaborates on our stellar 4.4/5 rating. The <a href="https://www.comparably.com/companies/bloomreach" target="_blank">Bloomreach Comparably page</a> Culture score is even higher at 4.9/5</span></div> </li> </ul> <h3 style="text-align: justify;"><strong>Personal Development:</strong></h3> <ul style="text-align: justify;"> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We have a People Development Program -- participating in personal development workshops on various topics run by experts from inside the company. We are continuously developing &amp; updating competency maps for select functions.</span></div> </li> <li> <div><span style="font-weight: 400;">Our resident communication coach </span><a href="https://www.linkedin.com/in/ivo-ve%C4%8De%C5%99a-2a94291/" target="_blank"><span style="font-weight: 400;">Ivo Večeřa</span></a><span style="font-weight: 400;"> is available to help navigate work-related communications &amp; decision-making challenges.*</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">Our managers are strongly encouraged to participate in the Leader Development Program to develop in the areas we consider essential for any leader. The program includes regular comprehensive feedback, consultations with a coach and follow-up check-ins.</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">Bloomreachers utilize the $1,500 professional education budget on an annual basis to purchase education products (books, courses, certifications, etc.)*</span></div> </li> </ul> <h3 style="text-align: justify;"><strong>Well-being:</strong></h3> <ul style="text-align: justify;"> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">The Employee Assistance Program -- with counselors -- is available for non-work-related challenges.*</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">Subscription to Calm - sleep and meditation app.*</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We organize ‘DisConnect’ days where Bloomreachers globally enjoy one additional day off each quarter, allowing us to unwind together and focus on activities away from the screen with our loved ones.</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We facilitate sports, yoga, and meditation opportunities for each other.</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">Extended parental leave up to 26 calendar weeks for Primary Caregivers.*</span></div> </li> </ul> <h3 style="text-align: justify;"><strong>Compensation:</strong></h3> <ul style="text-align: justify;"> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">Restricted Stock Units or Stock Options are granted depending on a team member’s role, seniority, and location.*</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">Everyone gets to participate in the company's success through the company performance bonus.*</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We offer an employee referral bonus of up to $3,000 paid out immediately after the new hire starts.</span></div> </li> <li style="font-weight: 400;"> <div><span style="font-weight: 400;">We reward &amp; celebrate work anniversaries -- Bloomversaries!*</span></div> </li> </ul> <p style="text-align: justify;"><em><span style="font-weight: 400;">(*Subject to employment type. Interns are exempt from marked benefits, usually for the first 6 months.)</span></em></p> <p style="text-align: justify;"><strong>Excited? Join us and transform the future of commerce experiences!</strong></p> <p style="text-align: justify;"><span style="font-weight: 400;"><em>If this position doesn't suit you, but you know someone who might be a great fit, share it - we will be very grateful!</em></span></p> <hr> <p style="text-align: justify;"><em><span style="font-weight: 400;">Any unsolicited resumes/candidate profiles submitted through our website or to personal email accounts of employees of Bloomreach are considered property of Bloomreach and are not subject to payment of agency fees.</span></em></p> <p style="text-align: justify;"><span style="color: rgb(236, 240, 241);">#LI-Remote</span></p></div>