Vedoucí inženýr - cloudová bezpečnost

Job Description

Bloom Energy, a solid oxide fuel cell company, is looking for a Staff Engineer - Cloud Security to join its world-class team. We are seeking an accomplished Cloud Security Architect to lead the design, implementation, and ongoing management of our Cloud Security products (Falcon Cloud Security - CNAPP/CSPM/CWPP/DSPM). The ideal candidate is a hands-on cloud security expert who can translate enterprise risk into resilient architecture across AWS, Azure, Oracle Cloud Infrastructure, embed security throughout the development lifecycle, and drive secure AI adoption and AI governance across the enterprise, partnering closely with cloud platform, DevOps, and security operations teams.

Key Responsibilities

• Architect, deploy, and manage the CrowdStrike Cloud Security stack - Falcon Cloud Security (CNAPP, CSPM, CWPP, KSPM, DSPM), across multi-cloud environments.
• Design and implement cloud security posture management (CSPM) and CNAPP controls to deliver continuous visibility, threat detection, and misconfiguration remediation across AWS, Oracle Cloud Infrastructure and Azure.
• Lead AI security and governance initiatives - conduct AI/LLM security reviews, design AI guardrails to prevent sensitive data exposure, perform Model Context Protocol (MCP) security assessments, and define secure AI adoption practices and controls.
• Lead SIEM engineering and modernization, including detection engineering, log onboarding, and migration to CrowdStrike NG-SIEM.
• Enable monitoring and visibility for Kubernetes/container workloads, including restricted environments.
• Define and enforce security architecture standards.
• Integrate security into CI/CD pipelines (static code analysis, vulnerability/container scanning) and champion DevSecOps practices.
• Evaluate, design, and implement Data Loss Prevention (DLP) and data protection controls for AI platforms, cloud workloads, and sensitive enterprise data.
• Conduct periodic assessments and audits against CIS Benchmarks and applicable regulatory/compliance frameworks; generate compliance reporting for stakeholders and auditors.
• Drive tool onboarding, account onboarding design, roadmap development, and strategic planning; deliver product demonstrations and presentations to secure stakeholder alignment and approvals.
• Collaborate cross-functionally with cloud platform, DevOps, and SOC teams to strengthen compliance, observability, and incident detection capabilities.

Required Skills & Qualifications

• CrowdStrike expertise - hands-on experience with the CrowdStrike Falcon platform, Falcon Cloud Security (CNAPP/CSPM/CWPP/DSPM), and CrowdStrike Next-Gen SIEM.
• AI Security & Governance expertise - demonstrated experience with AI/LLM security reviews, AI guardrails, secure LLM implementation, Model Context Protocol (MCP) assessments, and enterprise AI governance frameworks.
• Strong background in multi-cloud security across AWS, Oracle Cloud Infrastructure, Azure, including IAM, network security, encryption, and secrets management (e.g., Vault, AWS KMS).
• Proven proficiency with CNAPP/CSPM tooling and DSPM solutions through the CrowdStrike solution stack.
• CI/CD and DevSecOps experience with tools such as Jenkins and GitHub Actions, including security integration into build pipelines.
• Working knowledge of containerization and orchestration - Docker, Kubernetes - including securing restricted environments.
• Strong understanding of compliance frameworks and security best practices (CIS Benchmarks, NIST, MITRE ATT&CK framework etc.).
• Excellent stakeholder engagement, communication, and presentation skills, with the ability to influence technical and non-technical audiences.
• Education: Bachelor's degree in engineering, or a related field.
• Certifications (preferred): AWS Solutions Architect, CrowdStrike Certifications (CCFA / CCFR / CCFH etc.).

Skills and Experience

• 12+ years of overall technology experience, with a strong recent focus (8-10 years) in cloud security, security architecture, and security engineering.
• Demonstrated experience implementing and managing enterprise-scale cloud security platforms and leading multi-cloud security transformation initiatives.
• Hands-on experience delivering AI security and governance programs - securing AI/LLM workloads, implementing guardrails, and enabling safe, compliant AI adoption at enterprise scale.
• Track record of delivering measurable outcomes such as cost optimization, platform consolidation, and security posture improvement.
• Experience leading projects, including resource planning, roadmap development, and cross-functional delivery.