Principal, Security Engineer SOC

Bloom Energy; San Jose (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive medical, dental, and vision plans

401(k) retirement plan with company match

Mental health support services

Legal services

Virtual physical therapy access

Fertility and family-forming benefits

Job summary

Bloom Energy, headquartered in San Jose, CA, is seeking a Principal Security Engineer, SOC to join our team. This fully on-site role requires attendance five days a week in our San Jose office.

The successful candidate will be responsible for designing robust security architectures, conducting risk assessments, and mentoring junior team members. Strong knowledge of cloud security, Zero Trust models, and security frameworks is essential. The position offers excellent benefits including medical plans and a 401(k) retirement plan.

Qualifications

• Minimum of 8-10 years of experience in security, with at least 3 years in a senior or architect role.
• Strong knowledge of security frameworks and proficiency with various security tools.
• Experience with cloud security and understanding of cloud-native security practices.

Responsibilities

• Design and implement robust security architectures for enterprise-level systems.
• Conduct comprehensive risk assessments and vulnerability analyses.
• Lead and coordinate incident response efforts during security breaches.

Skills

Security frameworks (NIST, ISO 27001)

Firewalls

Intrusion detection systems

Cloud security (AWS, Azure)

Zero Trust security models

Cyber resiliency

Data security strategies

DevSecOps practices

Education

Bachelor’s degree in Engineering, Computer Science, Information Technology

Tools

SIEM

SOAR

XDR

DLP

CASB

CNAPP

Vulnerability scanning tools

Job description

Overview

Bloom Energy, headquartered in San Jose, CA, is seeking a Principal Security Engineer, SOC to join our team. This fully on‑site role reports to our Chief Security Officer and requires attendance five days a week in our San Jose office.

Responsibilities

• Design and implement robust security architectures for enterprise‑level systems, ensuring alignment with business objectives and regulatory requirements.
• Create, update, and enforce security policies, standards, and procedures to protect the organization’s information assets.
• Conduct comprehensive risk assessments and vulnerability analyses to identify potential security threats and develop mitigation strategies.
• Work closely with IT, development, and business teams to integrate security measures into software development, network infrastructure, and cloud services.
• Lead and coordinate incident response efforts, providing expertise during security breaches and ensuring effective resolution and documentation.
• Stay updated on the latest security technologies, trends, and threats, recommending improvements to enhance the organization’s security posture.
• Mentor and guide junior security team members, fostering a culture of continuous learning and professional development.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, Information Technology, or a related field.
• Minimum of 8‑10 years of experience in security, with at least 3 years in a senior or architect role.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001) and proficiency with firewalls, intrusion detection systems, SIEM, SOAR, XDR, email security, DLP, CASB, CNAPP, vulnerability scanning, threat intelligence, and automated penetration testing.
• Experience with cloud security in AWS or Azure and understanding of cloud‑native security practices.
• Proficiency in designing and implementing Zero Trust security models, including secure network strategies, authentication policies, and risk‑management frameworks.
• Expertise in cyber resiliency, incident‑response planning, threat‑intelligence analysis, and business‑continuity during and after cyber incidents.
• Strong understanding of network protocols, secure network architecture, and experience configuring and managing firewalls, intrusion detection systems, and encryption solutions.
• Experience with IAM principles and best practices, including RBAC, SSO, MFA, and identity governance.
• Proficiency in data security strategies, including encryption, DLP, secure data storage, and data‑integrity measures.
• Experience in endpoint protection, anti‑malware solutions, host‑based IDS/IPS, endpoint hardening, and mobile device management.
• Knowledge of IoT security principles, including cryptography, identity and access management, and secure network architecture for IoT devices.
• Experience with DevSecOps practices, integrating security into the software development lifecycle, automating security processes, and using tools for continuous security monitoring.
• Experience in product security, identifying and mitigating risks within products, and collaborating with development teams.
• Excellent analytical and problem‑solving skills, with the ability to work under pressure and handle complex security issues.
• Strong communication and leadership skills, with the ability to convey security concepts to technical and non‑technical stakeholders.

Benefits

• Competitive medical, dental, and vision plans with substantial employer contribution.
• 401(k) retirement plan with company match.
• Mental health support services.
• Legal services.
• Virtual physical therapy access.
• Fertility and family‑forming benefits.

Equal Opportunity Employment

Bloom Energy is an equal‑opportunity employer and makes employment decisions on the basis of merit. All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or disability. Bloom Energy makes reasonable accommodations for qualified applicants and employees with disabilities, unless undue hardship would result.