Security Analyst

About the role

Bloomreach is looking for a Security Analyst to join its Global Information Security & Technology (GIST) team. The role works within a 24/7 Security Operations Center, protecting a large e‑commerce platform and millions of online users from threats, vulnerabilities and sophisticated attackers.

Key responsibilities

• Monitor and analyze security, system, application, cloud and infrastructure logs to detect suspicious activity.
• Investigate alerts, incidents and service requests, performing triage, analysis, documentation and escalation.
• Develop, tune and maintain detection use cases and alerts in SIEM and SOAR platforms.
• Collaborate with Product Security, Infrastructure Security, GRC, Engineering and other teams during investigations and incident response.
• Maintain automation workflows, runbooks and knowledge‑base articles, and support audit activities.

Required profile

• 3–5 years of hands‑on experience in a 24×7 Security Operations Center or equivalent.
• Practical experience with cloud environments (AWS and/or GCP) and cloud security tooling.
• Proven ability to lead incident response, act as Incident Commander and coordinate cross‑functional teams.
• Strong understanding of vulnerability management, threat intelligence and security frameworks.

Required skills

• SIEM platforms – preferably Splunk.
• SOAR platforms and security automation workflows.
• Endpoint Detection and Response (EDR) solutions.
• Cloud security platforms such as Wiz, CrowdStrike Falcon Cloud Security, Prisma Cloud, Microsoft Defender for Cloud, Sysdig.
• Vulnerability management tools – Qualys, Rapid7, etc.
• Scripting in Python, Bash or PowerShell.
• Experience with AWS and Google Cloud Platform services and security controls.