Product Security Engineer

<div class="content-intro"><div class="p-rich_text_section">Bloomreach is building the world’s premier <strong data-stringify-type="bold">agentic platform for personalization</strong>.We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the <strong data-stringify-type="bold"><em data-stringify-type="italic">entire</em></strong> customer journey.</div> <ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested" data-stringify-type="unordered-list" data-list-tree="true" data-indent="0" data-border="0"> <li data-stringify-indent="0" data-stringify-border="0">We're taking <strong data-stringify-type="bold">autonomous search</strong> mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses.</li> <li data-stringify-indent="0" data-stringify-border="0">We’re making <strong data-stringify-type="bold">conversational shopping</strong> a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey.</li> <li data-stringify-indent="0" data-stringify-border="0">We're designing the future of <strong data-stringify-type="bold">autonomous marketing</strong>, taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do.</li> </ul> <div class="p-rich_text_section">And we're building all of that on the intelligence of a single AI engine — <strong data-stringify-type="bold">Loomi </strong>— so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora.</div></div><p><strong>About the Role:</strong></p> <p>You will act as the designated security focus on a specific product domain, driving threat modeling, security assessments, and vulnerability management across Bloomreach's platform.</p> <p><strong>Your Job Will Be:</strong></p> <ul> <li>Support the implementation and adoption of <strong>Secure Software Development Lifecycle </strong>(<strong>SSDLC</strong>) practices across engineering teams, helping integrate security throughout the product development process.</li> <li>Perform security reviews of <strong>application designs</strong>, <strong>system architectures</strong>, and i<strong>nfrastructure components</strong>, with guidance as needed, to identify security risks and recommend appropriate mitigations.</li> <li>Participate in <strong>threat modeling</strong> exercises for new and existing products, helping identify threats, assess risk, and document practical security recommendations.</li> <li>Provide security guidance to product and engineering teams by applying established security standards, patterns, and best practices, escalating complex security concerns when appropriate.</li> <li>Conduct <strong>security assessments</strong>, <strong>penetration testing</strong>, and <strong>validation testing</strong> across applications and environments using established methodologies and processes.</li> <li><strong>Triage</strong>, <strong>validate</strong>, and assign vulnerabilities identified through security tools and assessments, working with the appropriate stakeholders to support timely <strong>remediation</strong>.</li> <li&g