B

Bloom Energy

Hydrogen fuel cell-based microgrid provider

Staff Cloud Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeSan Jose, CA, USA$155.8k - $224.2k

About the Job

Requirements

  • A bachelor's degree in computer science, engineering, information technology, cybersecurity, or a related field is required.
  • At least 10 years of experience in security engineering, cloud security architecture, or cybersecurity operations is required.
  • Strong hands-on expertise with AWS and/or Microsoft Azure security services and cloud-native architectures is required.
  • Experience implementing security automation within CI/CD and Infrastructure-as-Code environments is required.
  • Deep understanding of IAM, network security, encryption, secrets management, logging, monitoring, and threat detection is required.
  • Experience securing enterprise data platforms and modern cloud-native applications is required.
  • Strong knowledge of NIST, CIS, Zero Trust, and secure SDLC principles is required.

Responsibilities

  • Design, implement, automate, and maintain security architectures, controls, and processes across AWS and Microsoft Azure environments.
  • Develop and maintain cloud security reference architectures, patterns, and guardrails aligned with industry best practices and Bloom Energy security standards.
  • Build and operationalize security baseline controls integrated into CI/CD pipelines and Infrastructure-as-Code deployments.
  • Implement policy-as-code and automated compliance validation across cloud environments.
  • Review and approve security-sensitive infrastructure and application changes, including IAM policies, network security controls, secrets management, and cloud-native services.
  • Serve as the cloud security subject matter expert supporting enterprise cloud transformation initiatives across IaaS, PaaS, and SaaS platforms.
  • Define and implement security frameworks for AI/ML systems across the full model lifecycle, including data ingestion, model training, deployment, and monitoring.
  • Assess and mitigate emerging AI security risks, including adversarial attacks, prompt injection, model theft, model inversion, and data poisoning.
  • Secure AI/ML platforms and services including Amazon SageMaker, Bedrock, Azure Machine Learning, OpenAI APIs, and other enterprise AI tooling.
  • Collaborate with AI engineering and data science teams to integrate security controls into MLOps pipelines and AI governance processes.
  • Monitor evolving AI regulations, standards, and frameworks, including NIST AI RMF and global AI governance initiatives, and translate them into actionable controls and engineering practices.
  • Implement and manage Data Security Posture Management capabilities to identify and reduce sensitive data exposure across cloud environments.
  • Design and enforce controls for structured and unstructured data platforms, including databases, data lakes, warehouses, object storage, and analytics platforms such as AWS S3.
  • Drive adoption of data-centric security controls including encryption, tokenization, data classification, retention, and access governance.
  • Partner with application and analytics teams to embed secure data handling practices into engineering workflows.
  • Provide deep technical expertise across cloud, AI, infrastructure, identity, and application security domains.
  • Lead security assessments and threat modeling exercises for cloud services, AI/ML platforms, enterprise applications, and emerging technologies.
  • Enable secure innovation by partnering with engineering teams early in the design and development lifecycle.
  • Support incident response, investigation, and remediation activities related to cloud, AI, and data security events.
  • Collaborate with Information and OT Security, Infrastructure, Product Engineering, and Enterprise Architecture teams to drive secure technology adoption across the organization.
  • Contribute to the development of security standards, policies, and operational procedures aligned with business and regulatory requirements.

Desired Qualifications

  • Experience securing AI/ML platforms, GenAI services, or MLOps pipelines.
  • Familiarity with AI governance, AI security risks, and emerging regulatory frameworks.
  • Experience with DSPM, CSPM, CNAPP, SIEM, SOAR, and modern cloud security tooling.
  • Security certifications such as CISSP, CCSP, CCSK, AWS Certified Security Specialty, or Microsoft Certified: Azure Security Engineer Associate.
  • Additional certifications or training in AI security or data privacy/security domains, such as CDPSE, CIPP, or AI security certifications.

About the Company

Bloom Energy

Hydrogen fuel cell-based microgrid provider

Bloom Energy provides on-site, reliable power for businesses and data centers using hydrogen fuel cell-based microgrids. Its core product converts hydrogen into carbon-free electricity and can also produce clean hydrogen with less electricity to support decarbonization. The platform supports emissions management by yielding a pure CO2 stream for carbon capture and offers fuel-flexible options to reduce reliance on dirtier fuels. The company's goal is to decarbonize power, improve energy reliability, and enable clean hydrogen and carbon-capture solutions for customers.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Jose, CA
Founded
2001

Recently Posted Jobs

Explore more opportunities at Bloom Energy

See more jobs