Job Description

Bloom Energy, a solid oxide fuel cell company, is looking for a Staff Engineer – Cloud Security, to join its world-class team. We are seeking an accomplished Cloud Security Architect to lead the design, implementation, and ongoing management of our Cloud Security products (Falcon Cloud Security – CNAPP/CSPM/CWPP/DSPM). The ideal candidate is a hands-on cloud security expert who can translate enterprise risk into resilient architecture across AWS, Azure, Oracle Cloud Infrastructure, embed security throughout the development lifecycle, and drive secure AI adoption and AI governance across the enterprise, partnering closely with cloud platform, DevOps, and security operations teams.

Key Responsibilities

• Architect, deploy, and manage the CrowdStrike Cloud Security stack — Falcon Cloud Security (CNAPP, CSPM, CWPP, KSPM, DSPM), across multi-cloud environments.

• Design and implement cloud security posture management (CSPM) and CNAPP controls to deliver continuous visibility, threat detection, and misconfiguration remediation across AWS, Oracle Cloud Infrastructure and Azure.

• Lead AI security and governance initiatives — conduct AI/LLM security reviews, design AI guardrails to prevent sensitive data exposure, perform Model Context Protocol (MCP) security assessments, and define secure AI adoption practices and controls.

• Lead SIEM engineering and modernization, including detection engineering, log onboarding, and migration to CrowdStrike NG-SIEM.

• Enable monitoring and visibility for Kubernetes/container workloads, including restricted environments.

• Define and enforce security architecture standards.

• Integrate security into CI/CD pipelines (static code analysis, vulnerability/container scanning) and champion DevSecOps practices.

• Evaluate, design, and implement Data Loss Prevention (DLP) and data protection controls for AI platforms, cloud workloads, and sensitive enterprise data.

• Conduct periodic assessments and audits against CIS Benchmarks and applicable regulatory/compliance frameworks; generate compliance reporting for stakeholders and auditors.

• Drive tool onboarding, account onboarding design, roadmap development, and strategic planning; deliver product demonstrations and presentations to secure stakeholder alignment and approvals.

• Collaborate cross-functionally with cloud platform, DevOps, and SOC teams to strengthen compliance, observability, and incident detection capabilities.

Required Skills & Qualifications

• CrowdStrike expertise — hands-on experience with the CrowdStrike Falcon platform, Falcon Cloud Security (CNAPP/CSPM/CWPP/DSPM), and CrowdStrike Next-Gen SIEM.

• AI Security & Governance expertise — demonstrated experience with AI/LLM security reviews, AI guardrails, secure LLM implementation, Model Context Protocol (MCP) assessments, and enterprise AI governance frameworks.

• Strong background in multi-cloud security across AWS, Oracle Cloud Infrastructure, Azure, including IAM, network security, encryption, and secrets management (e.g., Vault, AWS KMS).

• Proven proficiency with CNAPP/CSPM tooling and DSPM solutions through the CrowdStrike solution stack.

• CI/CD and DevSecOps experience with tools such as Jenkins and GitHub Actions, including security integration into build pipelines.

• Working knowledge of containerization and orchestration — Docker, Kubernetes — including securing restricted environments.

• Strong understanding of compliance frameworks and security best practices (CIS Benchmarks, NIST, MITRE ATT&CK framework etc.).

• Excellent stakeholder engagement, communication, and presentation skills, with the ability to influence technical and non-technical audiences.

• Education: Bachelor's degree in engineering, or a related field.

• Certifications (preferred): AWS Solutions Architect, CrowdStrike Certifications ( CCFA / CCFR / CCFH etc.).

Skills and Experience:

• 12+ years of overall technology experience, with a strong recent focus (8–10 years) in cloud security, security architecture, and security engineering

• Demonstrated experience implementing and managing enterprise-scale cloud security platforms and leading multi-cloud security transformation initiatives.

• Hands-on experience delivering AI security and governance programs — securing AI/LLM workloads, implementing guardrails, and enabling safe, compliant AI adoption at enterprise scale.

• Track record of delivering measurable outcomes such as cost optimization, platform consolidation, and security posture improvement

• Experience leading projects, including resource planning, roadmap development, and cross-functional delivery.

About Bloom Energy:

Bloom Energy will make clean, reliable energy affordable for everyone in the world. Our technology, first developed for NASA's Mars Program, will dramatically change the way that the world’s energy is produced, distributed and consumed. Bloom’s unique on-site power generation systems are among the most efficient on the planet, providing significantly reduced operating costs and producing dramatically lower greenhouse gas emissions. Pioneering a new class of stationary fuel cells, Bloom is not just creating a new product or company; it is driving a whole new industry.

As one of Silicon Valley’s most promising startups, Bloom was the first clean energy technology investment for Kleiner Perkins and NEA, two of Silicon Valley’s most revered venture capital firms. The company has assembled a super-star board, experienced management team, and top-notch technical staff. Bloom Energy is growing quickly and is looking to add to its dynamic team.