Sr Cloud Security Engineer

** A World-Class Team
** BJ’s Wholesale Club is powered by more than 30,000 team members who make a real impact every day. Whether you're stocking shelves, solving problems or shaping strategy, your work helps families save on what matters most.

We’re a team built on purpose and opportunity. Join us and be part of something meaningful.
** Why You’ll Love Working at BJ’s
** At BJ’s Wholesale Club, our team members are at the heart of everything we do. That’s why we offer a comprehensive benefits package designed to support your health, well-being and future – both on and off the job. When you grow, we grow.
** Here’s just some of what you can look forward to:**
* ** Weekly Pay:
** Get paid every week so that you can manage your money on your terms.
* ** Free BJ’s Memberships:
** Enjoy a complimentary The Club Card Membership, plus a free Supplemental Membership for someone in your household.
* ** Generous Paid Time Off:
** Take the time you need with vacation, personal, sick days, holidays, bereavement, and jury duty leave.
* ** Flexible and Affordable

Health Benefits:

** Choose from three medical plans, and access optional dental, vision, Health Savings Account (HSA), and flexible spending account options to fit your lifestyle.
* ** 401(k) Retirement Savings Plan:
** Build your financial future with a company match (available to team members 18 and older).
* ** Employee Stock Purchase Plan:
** Accumulate funds through after-tax payroll deductions that can be used to purchase shares of BJ’s common stock at a 15% discount.  Eligibility requirements vary by position.
** Job Summ
** ary:

BJ’s is seeking a Cloud Security Engineer to help secure and operate our cloud environments across AWS, Azure, and GCP. This is a hands‐on engineering role responsible for evaluating cloud and application designs, operating cloud security tooling, and driving remediation of security findings in partnership with engineering and platform teams.

The Cloud Security Engineer plays a key role in strengthening cloud security posture by balancing security requirements with operational realities. This role is well‐suited for an engineer who can work independently, apply sound technical judgment, and collaborate across teams to reduce risk and improve security outcomes at scale.
** What You’ll Do
*** Perform security architecture and design reviews for cloud services, applications, and technologies, providing clear and actionable guidance to engineering teams.
* Evaluate cloud designs for security controls including identity and access management, encryption, logging, monitoring, and network protections.
* Contribute to the definition and ongoing improvement of cloud security standards, reference architectures, and configuration baselines.
* Implement, operate, and tune security tooling used for visibility, monitoring, detection, and response across AWS, Azure, and GCP.
* Own the triage, validation, prioritization, and remediation tracking of cloud security findings generated by CSPM and related tooling.
* Partner with cloud, infrastructure, and application teams to ensure remediation is effective and sustainable.
* Identify opportunities to automate repetitive security tasks or control validations to improve efficiency, consistency, and scalability of cloud security operations.
* Support infrastructure hardening and patch compliance efforts across cloud and on‐prem environments.
* Perform risk‐based analysis of vulnerability findings, including false positive validation and remediation tracking.
* Work with platform and operations teams to improve vulnerability management and patching workflows over time.
* Review application designs and implementation patterns to ensure alignment with Secure SDLC and secure coding expectations.
* Support application security activities including static, dynamic, and dependency scanning and analysis.
* Assist development teams in understanding and remediating application security findings.
* Provide operational support for web application security technologies such as Web Application Firewalls (WAF) and related edge controls, including Akamai where applicable.
* Support certificate lifecycle management by maintaining…