Staff Cloud Security Engineer

bloomenergy; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Bloom Energy seeks a Staff Cloud Security Engineer in San Jose, CA to lead security design across AWS/Azure, implement CI/CD security controls, and drive policy-as-code, data protection, and incident response. You will collaborate with AI, data, and infra teams to secure cloud, AI, and data platforms and ensure compliance with evolving standards.

The role emphasizes DevSecOps, automation, and scalable security solutions across IaaS, PaaS, and SaaS domains, supporting Bloom's mission for secure

Qualifications

• Experience designing and implementing cloud security architectures across AWS and Azure
• Proficiency with IAM, encryption, data protection, and secret management
• Hands-on experience with CI/CD pipelines and infrastructure-as-code
• Familiarity with AI/ML security considerations and MLOps
• Ability to conduct threat modeling and security assessments across cloud platforms

Responsibilities

• Design, implement, automate, and maintain security architectures and controls across AWS and Azure
• Develop cloud security reference architectures and guardrails aligned with Bloom Energy standards
• Implement policy-as-code and automated compliance validation across cloud environments
• Review and approve security-sensitive infrastructure and changes (IAM, network, secrets)
• Lead security assessments and threat modeling for cloud services, AI/ML platforms, and enterprise apps
• Collaborate with cross-functional teams to drive secure innovation and engineering practices

Skills

DevSecOps

Cloud security

Security architecture

Threat modeling

Automation

CI/CD

IAM security

Data security

MLOps security

Security governance

Tools

AWS

Azure

SageMaker

Bedrock

OpenAI API

CI/CD tooling

IaC (Infrastructure as Code)

Job description

At Bloom Energy, our vision for a world powered by clean, reliable, and affordable energy is more than just a dream-we're making it reality.

For over two decades, we've been at the forefront of the global energy transition, pioneering solutions that empower critical industries to thrive in a rapidly digitizing, energy-intensive world. From revolutionizing power for AI-driven data centers to ensuring resilience for hospitals, electric grids, manufacturing facilities, and utilities, our solid oxide fuel cell (SOFC) and solid oxide electrolyzer (SOEC) technologies are redefining what's possible by delivering energy abundance for all. With more than 30,000 fuel cell modules deployed worldwide, we are the trusted partner for Fortune 100 companies and innovators alike. Our cutting-edge solutions enable unparalleled "time-to-power" capabilities, reliability, and sustainability, ensuring our customers remain ahead in a world where soaring energy demand and intensifying energy scarcity are rapidly becoming the new norm.

At Bloom, we thrive on collaboration, bold thinking, and relentless innovation. We believe that, together, we can create a brighter, more sustainable future while tackling the most pressing challenges of the 21st century.

Staff Cloud Security Engineer

We are looking for a Staff Cloud Security Engineer to join our team in one of today's most exciting technologies. This role will report to Senior Manager, Cloud Engineering and based in San Jose, CA . This is a fully on-site, in office role 5 days a week.

Cloud Security Engineering

• Design, implement, automate, and maintain security architectures, controls, and processes across AWS and Microsoft Azure environments
• Develop and maintain cloud security reference architectures, patterns, and guardrails aligned with industry best practices and Bloom Energy security standards
• Build and operationalize security baseline controls integrated into CI/CD pipelines and Infrastructure-as-Code deployments
• Implement policy-as-code and automated compliance validation across cloud environments
• Review and approve security -sensitive infrastructure and application changes, including IAM policies, network security controls, secrets management, and cloud -native services
• Serve as the cloud security subject matter expert supporting enterprise cloud transformation initiatives across IaaS, PaaS, and SaaS platforms

AI & Machine Learning Security

• Define and implement security frameworks for AI/ML systems across the full model lifecycle, including data ingestion, model training, deployment, and monitoring
• Assess and mitigate emerging AI security risks such as adversarial attacks, prompt injection, model theft, model inversion, and data poisoning
• Secure AI/ML platforms and services including Amazon SageMaker, Bedrock, Azure Machine Learning, OpenAI APIs, and other enterprise AI tooling
• Collaborate with AI engineering and data science teams to integrate security controls into MLOps pipelines and AI governance processes
• Monitor evolving AI regulations, standards, and frameworks including NIST AI RMF and global AI governance initiatives, translating them into actionable controls and engineering practices

Data Security

• Implement and manage Data Security Posture Management (DSPM) capabilities to identify and reduce sensitive data exposure across cloud environments
• Design and enforce controls for structured and unstructured data platforms including databases, data lakes, warehouses, object storage, and analytics platforms such as AWS S3.
• Drive adoption of data-centric security controls including encryption, tokenization, data classification, retention, and access governance
• Partner with application and analytics teams to embed secure data handling practices into engineering workflows

Security Architecture & Leadership

• Provide deep technical expertise across cloud , AI, infrastructure, identity, and application security domains
• Lead security assessments and threat modeling exercises for cloud services, AI/ML platforms, enterprise applications, and emerging technologies
• Enable secure innovation by partnering with engineering teams early in the design and development lifecycle
• Support incident response, investigation, and remediation activities related to cloud , AI, and data security events
• Collaborate closely with Information and OT Security , Infrastructure, Product Engineering, and Enterprise Architecture teams to drive secure technology adoption across the organization
• Contribute to the development of security standards, policies, and operational procedures aligned with business and regulatory requirements

What You Bring

• Self-starter with strong ownership mentality and ability to manage multiple priorities in a dynamic environment
• Passion for DevSecOps, automation, and engineering scalable security solutions
• Strong curiosity and practical understanding of the evolving AI threat landscape and modern cloud -native technologies
• Collaborative mindset with ability to work effectively