<div class="content-intro"><div class="p-rich_text_section">Bloomreach is building the world’s premier <strong data-stringify-type="bold">agentic platform for personalization</strong>.We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the <strong data-stringify-type="bold"><em data-stringify-type="italic">entire</em></strong> customer journey.</div> <ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested" data-stringify-type="unordered-list" data-list-tree="true" data-indent="0" data-border="0"> <li data-stringify-indent="0" data-stringify-border="0">We're taking <strong data-stringify-type="bold">autonomous search</strong> mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses.</li> <li data-stringify-indent="0" data-stringify-border="0">We’re making <strong data-stringify-type="bold">conversational shopping</strong> a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey.</li> <li data-stringify-indent="0" data-stringify-border="0">We're designing the future of <strong data-stringify-type="bold">autonomous marketing</strong>, taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do.</li> </ul> <div class="p-rich_text_section">And we're building all of that on the intelligence of a single AI engine — <strong data-stringify-type="bold">Loomi </strong>— so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora.</div></div><p><strong>About the Role</strong></p> <p>You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response.</p> <p>You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response.</p> <p><strong>Your Job Will Be (but not limited to)</strong></p> <ul> <li>Design, implement, and monitor security controls across our <strong>AWS</strong> cloud infrastructure, applying platform-native services (e.g., <strong>IAM, GuardDuty, Security Hub, KMS, VPC/Security Groups, Config</strong>) and secure architecture patterns to protect production environments.</li> <li>Maintain deep working knowledge of the <strong>AWS security service landscape</strong>, evaluating new and existing services to close coverage gaps and strengthen our security architecture.</li> <li>Secure our <strong>Linux</strong> server fleet and <strong>containerized workloads (Docker, Kubernetes)</strong>, including host hardening, image and runtime security, and Kubernetes cluster and workload configuration.</li> <li>Own the security of our <strong>corporate infrastructure</strong>, including security configuration and administration of identity and access tooling such as <strong>JumpCloud</strong> and zero-trust network access tooling such as <strong>Twingate</strong>.</li> <li>Administer and integrate <strong>Splunk</strong> as a data platform — onboarding new log sources, maintaining data pipelines, and supporting platform health and licensing — in partnership with the SOC team, which owns detection content, alerting logic, and playbooks.</li> <li>Identify, triage, and drive remediation of infrastructure and web application vulnerabilities, partnering with engineering teams to reduce <strong>MTTR</strong> and improve remediation rates.</li> <li>Lead <strong>CVE lifecycle management</strong> and patching efforts, performing root cause analysis and tracking remediation metrics across cloud, corporate, and on-prem systems.</li> <li>Build and maintain secure automation and tooling for vulnerability remediation and infrastructure hardening using <strong>Python, Go, or Bash</strong> or similar scripting languages.</li> <li>Implement security guardrails and policy-as-code within <strong>Infrastructure as Code (IaC)</strong> and <strong>CI/CD pipelines</strong>, performing static IaC scanning and enforcing security baselines prior to deployment.</li> <li>Define logging and telemetry requirements for cloud, container, and corporate infrastructure assets, ensuring the SOC team has the data coverage needed for effective detection.</li> <li>Develop, document, and operationalize <strong>security architecture standards</strong> for cloud, container, and corporate infrastructure, partnering with engineering pillars and IT to drive adoption across the organization.</li> <li>Partner with the SOC team on incident response as a technical subject-matter expert for cloud, container, and corporate infrastructure </li> <li>Mentor junior security engineers and prioriti