Staff Cloud Security Engineer - AI/ML & Data Security

Bloom Energy; San Jose (CA); On-site; USD 156,000 - 224,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) plan

Mental health services

Fertility & Family Forming benefits

Job summary

Bloom Energy seeks a Staff Cloud Security Engineer to design, implement, and maintain security architectures across AWS and Azure, reporting to the Senior Manager, Cloud Engineering in San Jose, CA. This on-site role collaborates with cross-functional teams to advance security across IaaS, PaaS, and SaaS platforms, including AI/ML security programs.

Responsibilities include policy-as-code, automated compliance, threat modeling, incident response support, and leading secure development practices.

Qualifications

• Bachelor's degree in CS, Engineering or related field.
• 10+ years of experience in security engineering or cloud security.
• Hands-on expertise with AWS and/or Azure security services.
• Experience implementing security automation within CI/CD and IaC environments.
• Deep understanding of IAM, network security, encryption, logging, monitoring, and threat detection.
• Knowledge of NIST, CIS, Zero Trust, and secure SDLC principles.

Responsibilities

• Design, implement, automate, and maintain security architectures across AWS and Azure environments.
• Develop and maintain cloud security reference architectures, patterns, and guardrails.
• Build and operationalize security baseline controls in CI/CD pipelines and IaC deployments.
• Implement policy-as-code and automated compliance validation across cloud environments.
• Review and approve security-sensitive infrastructure changes, including IAM policies and network security controls.
• Serve as cloud security SME supporting enterprise cloud transformation across IaaS, PaaS, and SaaS.
• Define and implement security frameworks for AI/ML systems across the full model lifecycle.
• Collaborate with AI/ML teams to integrate security controls into MLOps pipelines.
• Monitor evolving AI regulations and translate into actionable controls.
• Drive DSPM, CSPM, CNAPP, SIEM, SOAR and modern cloud tooling adoption.

Skills

Cloud security design

DevSecOps

Threat modeling

IAM security

CI/CD security

Automation

Communication

Education

Bachelor's degree in CS/Engineering/IT

Tools

AWS

Azure

IaC

CASB

DSPM

Job description

Bloom Energy seeks a Staff Cloud Security Engineer to design, implement, and maintain security architectures across AWS and Azure, reporting to the Senior Manager, Cloud Engineering in San Jose, CA. This on-site role collaborates with cross-functional teams to advance security across IaaS, PaaS, and SaaS platforms, including AI/ML security programs.

Responsibilities include policy-as-code, automated compliance, threat modeling, incident response support, and leading secure development practices.