Sr Security Architect

At Bloom Energy, our vision for a world powered by clean, reliable, and affordable energy is more than just a dream—we’re making it reality.

For over two decades, we’ve been at the forefront of the global energy transition, pioneering solutions that empower critical industries to thrive in a rapidly digitizing, energy-intensive world. From revolutionizing power for AI-driven data centers to ensuring resilience for hospitals, electric grids, manufacturing facilities, and utilities, our solid oxide fuel cell (SOFC) and solid oxide electrolyzer (SOEC) technologies are redefining what’s possible by delivering energy abundance for all. With more than 30,000 fuel cell modules deployed worldwide, we are the trusted partner for Fortune 100 companies and innovators alike. Our cutting-edge solutions enable unparalleled “time-to-power” capabilities, reliability, and sustainability, ensuring our customers remain ahead in a world where soaring energy demand and intensifying energy scarcity are rapidly becoming the new norm.

At Bloom, we thrive on collaboration, bold thinking, and relentless innovation. We believe that, together, we can create a brighter, more sustainable future while tackling the most pressing challenges of the 21st century.

We are looking for a Senior Security Architect to join our team in one of today’s most exciting technologies. This role is based in San Jose, CA. This is a fully on-site, in office role.

Responsibilities:

• Security Architecture Design: Develop and implement robust security architectures for enterprise-level systems, ensuring alignment with business objectives and regulatory requirements.
• AI Security: Define security controls for LLMs (Large Language Models), GenAI platforms, AI APIs, and Agentic AI. Embed security into MLOps pipelines (DevSecOps for AI). Design secure architectures for AI/ML systems, including model training, inference, and deployment pipelines. Protect against model theft and extraction attacks. Implement model monitoring for drift, anomalies, and abuse. Ensure secure model storage, versioning, and access control.
• Policy Development: Create, update, and enforce security policies, standards, and procedures to protect the organization's information assets.
• Risk Management: Conduct comprehensive risk assessments and vulnerability analyses to identify potential security threats and develop mitigation strategies.
• Collaboration: Work closely with IT, development, and business teams to integrate security measures into all aspects of the organization, including software development, network infrastructure, and cloud services.
• Incident Response: Assist SOC team with incident response efforts, providing expertise during security breaches and ensuring effective resolution and documentation.
• Continuous Improvement: Stay updated on the latest security technologies, trends, and threats, and recommend improvements to enhance the organization's security posture.
• Mentorship: Mentor and guide junior security team members, fostering a culture of continuous learning and professional development.

Requirements:

• Educational Background: Bachelor's degree in engineering, Computer Science, Information Technology, or a related field.
• Experience: Minimum of 12+ years of experience in security, with at least 3 years in architect or equivalent role.
• Technical Proficiency: Strong knowledge of security frameworks (e.g., NIST, ISO 27001) and proficiency in security technologies such as firewalls, web proxy, intrusion detection/prevention systems, SASE, Secure Browser, XDR, DLP, CASB, CNAPP, IAM.

• AI Security: Hands on experience with defining security controls for LLMs (Large Language Models), GenAI platforms, AI APIs, and Agentic AI. Embed security into MLOps pipelines (DevSecOps for AI). Design secure architectures for AI/ML systems, including model training, inference, and deployment pipelines. Protect against model theft and extraction attacks. Implement model monitoring for drift, anomalies, and abuse. Ensure secure model storage, versioning, and access control.

• Cloud Security: Experience with cloud security (AWS, Azure) and understanding of cloud-native security practices.
• Zero Trust Security: Proficiency in designing and implementing Zero Trust security models, including secure network strategies, strong authentication policies, and risk management frameworks.
• Cyber Resiliency: Expertise in building cyber resiliency, including developing incident response plans, conducting threat intelligence analysis, and ensuring business continuity during and after cyber incidents.
• Network Security: Strong understanding of network protocols, secure netwo