Principal, Security Engineer SOC

Overview

Bloom Energy, headquartered in San Jose, CA, is seeking a Principal Security Engineer, SOC to join our team. This fully on‑site role reports to our Chief Security Officer and requires attendance five days a week in our San Jose office.

• Design and implement robust security architectures for enterprise‑level systems, ensuring alignment with business objectives and regulatory requirements.
• Create, update, and enforce security policies, standards, and procedures to protect the organization’s information assets.
• Conduct comprehensive risk assessments and vulnerability analyses to identify potential security threats and develop mitigation strategies.
• Work closely with IT, development, and business teams to integrate security measures into software development, network infrastructure, and cloud services.
• Lead and coordinate incident response efforts, providing expertise during security breaches and ensuring effective resolution and documentation.
• Stay updated on the latest security technologies, trends, and threats, recommending improvements to enhance the organization’s security posture.
• Mentor and guide junior security team members, fostering a culture of continuous learning and professional development.

• Bachelor’s degree in Engineering, Computer Science, Information Technology, or a related field.
• Minimum of 8‑10 years of experience in security, with at least 3 years in a senior or architect role.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001) and proficiency with firewalls, intrusion detection systems, SIEM, SOAR, XDR, email security, DLP, CASB, CNAPP, vulnerability scanning, threat intelligence, and automated penetration testing.
• Experience with cloud security in AWS or Azure and understanding of cloud‑native security practices.
• Proficiency in designing and implementing Zero Trust security models, including secure network strategies, authentication policies, and risk‑management frameworks.
• Expertise in cyber resiliency, incident‑response planning, threat‑intelligence analysis, and business‑continuity during and after cyber incidents.
• Strong understanding of network protocols, secure network architecture, and experience configuring and managing firewalls, intrusion detection systems, and encryption solutions.
• Experience with IAM principles and best practices, including RBAC, SSO, MFA, and identity governance.
• Proficiency in data security strategies, including encryption, DLP, secure data storage, and data‑integrity measures.
• Experience in endpoint protection, anti‑malware solutions, host‑based IDS/IPS, endpoint hardening, and mobile device management.
• Knowledge of IoT security principles, including cryptography, identity and access management, and secure network architecture for IoT devices.
• Experience with Dev Sec Ops  practices, integrating security into the software development lifecycle, automating security processes, and using tools for continuous security monitoring.
• Experience in product security, identifying and mitigating risks within products, and collaborating with development teams.
• Excellent analytical and problem‑solving skills, with the ability to work under pressure and handle complex security issues.
• Strong communication and leadership skills, with the ability to convey security concepts to technical and non‑technical stakeholders.

• Competitive medical, dental, and vision plans with substantial employer contribution.
• 401(k) retirement plan with company match.
• Mental health support services.
• Legal services.
• Virtual physical therapy access.
• Fertility and family‑forming benefits.

Bloom Energy is an equal‑opportunity employer and makes employment decisions on the basis of merit. All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or disability. Bloom Energy makes reasonable accommodations for qualified applicants and employees with disabilities, unless undue hardship would result.