Staff Engineer – Cloud Security

Bloom Energy; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Bloom Energy is seeking a Staff Engineer - Cloud Security to join its team in Bengaluru. You will lead the design, implementation, and ongoing management of cloud security products (Falcon Cloud Security CNAPP/CSPM/CWPP/DSPM) across AWS, Azure, and OCI, embedding security throughout development and guiding AI governance across the enterprise.

The role requires hands-on expertise in cloud security architecture, multi-cloud tooling, and DevSecOps practices, with a strong focus on risk-driven

Qualifications

• 12+ years of technology experience, with a strong 8–10 years in cloud security and security engineering.
• Hands-on expertise with CNAPP/CSPM tooling and multi-cloud security architectures.
• Experience designing and governing security across AI/LLM workloads and datasets.

Responsibilities

• Architect, deploy, and manage the CrowdStrike Falcon Cloud Security stack across multi-clouds.
• Lead AI security reviews, guardrails, MCP assessments, and enterprise AI governance.
• Drive SIEM evolution, log onboarding, and migration to NG-SIEM with monitoring for Kubernetes workloads.
• Integrate security into CI/CD pipelines and DevSecOps practices.
• Implement CSPM/CNAPP controls and data protection across cloud workloads.
• Ensure compliance with CIS Benchmarks and NIST frameworks; produce audit-ready reports.
• Collaborate with cloud platform, DevOps, and SOC teams on security visibility and incident detection.

Skills

CrowdStrike Falcon

CNAPP/CSPM

AI Security Governance

Multi-cloud security

CI/CD security

Jenkins

GitHub Actions

Kubernetes security

IAM & secret management

NIST/CIS frameworks

Stakeholder engagement

Education

Bachelor's degree in engineering

Tools

CrowdStrike Falcon platform

AWS

Azure

Oracle Cloud Infrastructure

KMS / Vault

Job description

Bloom Energy, a solid oxide fuel cell company, is looking for a Staff Engineer - Cloud Security, to join its world-class team. We are seeking an accomplished Cloud Security Architect to lead the design, implementation, and ongoing management of our Cloud Security products (Falcon Cloud Security - CNAPP/CSPM/CWPP/DSPM). The ideal candidate is a hands-on cloud security expert who can translate enterprise risk into resilient architecture across AWS, Azure, Oracle Cloud Infrastructure, embed security throughout the development lifecycle, and drive secure AI adoption and AI governance across the enterprise, partnering closely with cloud platform, DevOps, and security operations teams.

Key Responsibilities

• Architect, deploy, and manage the CrowdStrike Cloud Security stack - Falcon Cloud Security (CNAPP, CSPM, CWPP, KSPM, DSPM), across multi-cloud environments.
• Design and implement cloud security posture management (CSPM) and CNAPP controls to deliver continuous visibility, threat detection, and misconfiguration remediation across AWS, Oracle Cloud Infrastructure and Azure.
• Lead AI security and governance initiatives - conduct AI/LLM security reviews, design AI guardrails to prevent sensitive data exposure, perform Model Context Protocol (MCP) security assessments, and define secure AI adoption practices and controls.
• Lead SIEM engineering and modernization, including detection engineering, log onboarding, and migration to CrowdStrike NG-SIEM.
• Enable monitoring and visibility for Kubernetes/container workloads, including restricted environments.
• Define and enforce security architecture standards.
• Integrate security into CI/CD pipelines (static code analysis, vulnerability/container scanning) and champion DevSecOps practices.
• Evaluate, design, and implement Data Loss Prevention (DLP) and data protection controls for AI platforms, cloud workloads, and sensitive enterprise data.
• Conduct periodic assessments and audits against CIS Benchmarks and applicable regulatory/compliance frameworks; generate compliance reporting for stakeholders and auditors.
• Drive tool onboarding, account onboarding design, roadmap development, and strategic planning; deliver product demonstrations and presentations to secure stakeholder alignment and approvals.
• Collaborate cross-functionally with cloud platform, DevOps, and SOC teams to strengthen compliance, observability, and incident detection capabilities.

Required Skills & Qualifications

• CrowdStrike expertise - hands-on experience with the CrowdStrike Falcon platform, Falcon Cloud Security (CNAPP/CSPM/CWPP/DSPM), and CrowdStrike Next-Gen SIEM.
• AI Security & Governance expertise - demonstrated experience with AI/LLM security reviews, AI guardrails, secure LLM implementation, Model Context Protocol (MCP) assessments, and enterprise AI governance frameworks.
• Strong background in multi-cloud security across AWS, Oracle Cloud Infrastructure, Azure, including IAM, network security, encryption, and secrets management (e.g., Vault, AWS KMS).
• Proven proficiency with CNAPP/CSPM tooling and DSPM solutions through the CrowdStrike solution stack.
• CI/CD and DevSecOps experience with tools such as Jenkins and GitHub Actions, including security integration into build pipelines.
• Working knowledge of containerization and orchestration - Docker, Kubernetes - including securing restricted environments.
• Strong understanding of compliance frameworks and security best practices (CIS Benchmarks, NIST, MITRE ATT&CK framework etc.).
• Excellent stakeholder engagement, communication, and presentation skills, with the ability to influence technical and non-technical audiences.
• Education: Bachelor's degree in engineering, or a related field.
• Certifications (preferred): AWS Solutions Architect, CrowdStrike Certifications (CCFA / CCFR / CCFH etc.).
• Skills and Experience: 12+ years of overall technology experience, with a strong recent focus (8-10 years) in cloud security, security architecture, and security engineering.
• Demonstrated experience implementing and managing enterprise-scale cloud security platforms and leading multi-cloud security transformation initiatives.
• Hands-on experience delivering AI security and governance programs - securing AI/LLM workloads, implementing guardrails, and enabling safe, compliant AI adoption at enterprise scale.
• Track record of delivering measurable outcomes such as cost optimization, platform consolidation, and security posture improvement.
• Experience leading projects, including resource planning, roadmap development, and cross-functional delivery.

About Bloom Energy

Bloom Energy will make clean, reliable energy affordable for everyone in the world. Our technology, first developed for NASA's Mars Program, will dramatically change the way that the world’s energy is produced, distributed and consumed. Bloom's unique on-site power generation systems are among the most efficient on the planet, providing significantly reduced operating costs and producing dramatically lower greenhouse gas emissions. Pioneering a new class of stationary fuel cells, Bloom is not just creating a new product or company; it is driving a whole new industry. As one of Silicon Valley’s most promising startups, Bloom was the first clean energy technology investment for Kleiner Perkins and NEA, two of Silicon Valley’s most revered venture capital firms. The company has assembled a super-star board, experienced management team, and top-notch technical staff. Bloom Energy is growing quickly and is looking to add to its dynamic team.

Bloom Energy's mission is to make clean, reliable energy affordable for everyone in the world. With roots in NASA’s Mars Program, the company’s founder, chairman, and Chief Executive Officer, Dr. K.R. Sridhar, developed an innovative fuel cell technology that is shifting the energy paradigm and redefining the electric power market. The Bloom Energy Server is a distributed electric power solution built for the digital age and capable of delivering highly reliable, uninterrupted 24x7 constant power that is also clean and sustainable. Bloom's unique on-site power generation systems are among the most efficient on the planet, providing significantly reduced operating costs and producing dramatically lower greenhouse gas emissions. By generating power where it is consumed, Bloom Energy offers increased electrical reliability and improved energy security, providing a clear path to energy independence. Some of the largest companies in the world trust Bloom Energy to provide their businesses with clean, reliable and resilient energy. Bloom's customers include many Fortune 100 companies and leaders in manufacturing, data centers, healthcare, retail, higher education, utilities, and other industries. The company, headquartered in San Jose, California, is growing quickly and looking to add to its dynamic team. Stay up to date with Bloom Energy through our social channels.