Role: Full Stack Engineer focused on building and managing a cloud-based application security system.
Location: Multiple options available including Boston/East Coast, SF Bay Area/West Coast, and remote within the USA
Mission: Live at the intersection of app runtime & security. Protect applications in a fundamental way so that developers can build great application services and not be constantly looking over their shoulder. Bluerock is changing the landscape of App runtime security.
Responsibilities – Backend Development:
Develop and maintain web-based microservices for security apps, infrastructure policy management and orchestration
Design and implement Kubernetes services and custom resource definitions for multi-cloud provisioning
Build robust APIs for managing Kubernetes clusters, buckets, and cloud infrastructure across AWS, GCP, and Azure
Implement intelligent policy validation and drift detection for infrastructure-as-code
Create sophisticated Helm charts, Terraform modules, CloudFormation templates, and Kubernetes operators for automated deployments
Manage complex YAML templating systems and configuration management workflows
Design event-driven architectures for real-time infrastructure monitoring and remediation
Build integration layers between Kubernetes controllers and cloud provider APIs
Responsibilities – Frontend Development:
Design and develop sophisticated infrastructure management dashboards using modern web frameworks and templating systems
Create interactive policy editors with real-time validation and syntax highlighting
Build comprehensive infrastructure topology visualizations and dependency mapping
Develop intuitive cluster management interfaces with drag-and-drop resource allocation
Implement advanced data tables for managing fleets, and policies, configuration and analysis applications
Create responsive dashboards for monitoring deployment status and health
Build user-friendly forms for complex infrastructure configuration with guided workflows
Develop real-time status monitoring with WebSocket-based updates and polling mechanisms
Implement role-based access controls and multi-tenant infrastructure views
Create data visualizations using tools like D3.js and Chart.js
Build user interfaces using modern frameworks such as React, Vue.js, or Angular
Ensure user-friendly and accessible interfaces
Optimize performance for high data volumes
Develop responsive designs for mobile and desktop platforms
Implement advanced UI features like drag-and-drop functionality
Create reusable UI components
Develop data tables and search capabilities
Contribute to maintaining a consistent product design language
Security Focus
Ensure adherence to security standards
Develop secure communication channel
Implement comprehensive audit logging
Technology Stack
Programming Languages: Go, Rust, Python, TypeScript/JavaScript
Frameworks: Gin, React/Vue.js, Node.js, Django, or modern web frameworks (propose and champion alternatives)
Databases: PostgreSQL, Redis, InfluxDB, Cloud specific
Cloud Platforms: AWS, GCP, Azure, Kubernetes
Infrastructure: Crossplane providers, Helm charts, YAML templating, infrastructure-as-code
Monitoring: CloudWatch, OpenTelemetry, Prometheus, Grafana, real-time status polling
Tools: Docker, GitLab CI, Terraform, Helm, container orchestration
Required Qualifications
5+ years of Full Stack development experience with strong backend web framework expertise
Deep understanding of Kubernetes architecture, CRDs, controllers, and operators
Experience with infrastructure-as-code tools (Crossplane, Terraform, or similar)
Proficiency in YAML templating and complex configuration management
Strong frontend skills with modern templating systems, JavaScript, and responsive design frameworks
Hands-on experience with AWS services (S3, EKS, VPC, IAM)
Understanding of cloud-native patterns and microservices architecture
Experience with containerization (Docker) and orchestration platforms
Knowledge of GitOps workflows and CI/CD pipeline automation
Preferred Qualifications
Experience with security tools
Advanced knowledge of Kubernetes and system-level operations
Background in Cybersecurity
Experience working with real-time data systems
Understanding of cryptographic concepts
Proven track record of working on large-scale, distributed systems
About BlueRock:
BlueRock is a well-funded, early stage cybersecurity company founded by experienced security minded entrepreneurs. Our mission is to change the game in cybersecurity. Attackers are exploiting in hours. The dependency tree is exploding. Developers are drowning in vulnerability debt. BlueRock changes the game, enabling organizations to shift from chasing CVEs and exploits to proactively protecting the foundations of applications and computing, so that developers can build great applications without looking over their shoulders.
Top Skills
What We Do
BlueRock delivers the first Compute Firewall, revolutionizing runtime security in an era of AI-speed cyberattacks and escalating third-party software risks.
Traditional security tools and agents can't keep pace, leaving enforcement gaps exposed. Attackers now exploit vulnerabilities within minutes of disclosure, outpacing reactive detection methods.
BlueRock solves this by embedding real-time, preemptive enforcement directly into the compute layer, halting exploits precisely where they execute—before detection tools even trigger alerts. Unlike noisy, complex, and fragile agent-based solutions, BlueRock's Compute Firewall integrates seamlessly into the cloud image distributions you already use, requiring no code changes or application slowdowns.
Developers can concentrate on innovation instead of emergency patches, while security teams gain real-time enforcement, drastically reducing runtime risk.
Break free from the Dev versus Security trade-off. BlueRock enables both teams to thrive—accelerating business agility while delivering proactive, robust security.
Founded by cybersecurity pioneers Ashar Aziz (Founder/CEO of FireEye) and Bob Tinker (Founder/CEO of MobileIron), BlueRock bridges the longstanding divide between development velocity and security requirements.
