Senior Engineer II - SOC ( Crowdstrike experience)

Bloom Energy, a solid oxide fuel cell company, is looking for a Senior Engineer II – SOC, to join its world-class team. This individual should be a dynamic professional who is looking for a rewarding future in one of today’s most exciting technologies. As Senior Engineer II – SOC, you will be responsible for the Information Security of the global organization and will work on all information security controls at Bloom Energy. The ideal candidate is a deep security-focused technologist with proven track record of supporting globally distributed large scalable network and analysing, designing, and implementing security best practices.

Key Responsibilities

• Lead security assessments, threat analysis, and vulnerability management using Falcon Exposure Management and Falcon Discover for asset discovery, risk-based prioritization, and continuous attack-surface reduction.

• Own and optimize the endpoint security stack — Falcon Prevent (NGAV), Falcon Insight (EDR/XDR), Falcon Device Control, and Falcon Firewall Management — including policy design, detection tuning, and Real Time Response (RTR) containment.

• Serve as the in-house L3 escalation owner and incident commander for alerts handed off by Falcon Complete Next-Gen MDR and Adversary OverWatch, driving triage, root-cause analysis, and corrective action plans.

• Engineer and administer Falcon Next-Gen SIEM — data ingestion, retention, correlation content, dashboards, and build automated playbooks in Charlotte AI Agentic SOAR.

• Operate and mature cloud security through Falcon Cloud Security (CNAPP), including Cloud Detection & Response (CDR), container security (Falcon for Managed Containers), and posture management across AWS/Azure workloads (EC2/ECS/EKS).

• Implement and manage Identity Threat Detection & Response (ITDR) via Identity Threat Protection and Next-Gen Identity Security Privileged (NGIS+), enforcing Zero Trust, Just-in-Time / privileged access.

• Implement, monitor and optimise gaps in Falcon SaaS Security Posture Management (SSPM).

• Deploy and administer AIDR for Workforce to secure enterprise AI usage (shadow AI, prompt injection, data leakage) and Falcon Data Protection for DLP and data-loss controls.

• Operationalise Falcon Intelligence Recon for threat intel, digital-risk / brand-exposure monitoring, and intelligence-led detection.

• Manage Falcon Secure Access for enterprise browser security and friction-free managed browsing.

• Develop automation for security monitoring and compliance checks across the Falcon platform using its APIs and Charlotte AI/SOAR.

• Design secure system architectures (cloud, on-prem, hybrid) anchored on the Falcon agent and define security standards, frameworks, and controls as might be required for the SOC operation.

• Drive Security Operations and SOC Security-Maturity Improvement and govern MDR relationship and close control gaps through various SOC tools optimisation. 

• Collaborate with various teams and stakeholders to strengthen the overall security posture, and document security designs, processes, and best practices.

Required Skills & Qualifications

• Deep, hands-on expertise operating the CrowdStrike Falcon platform end-to-end environment.

• Proven experience with Falcon Complete MDR and Adversary OverWatch operating models and L3-in-house escalation workflows.

• Strong expertise in Falcon Next-Gen SIEM and Charlotte AI Agentic SOAR — ingestion, retention, correlation rules, dashboards, and automated response playbooks.

• Experience implementing Identity Threat Detection & Response (ITDR), NGIS+ privileged access, SSPM, Zero Trust and IAM strategy.

• Familiarity with  Falcon Data Protection (DLP), Falcon Adversary Intelligence Premium, Recon+, and Falcon Secure Access.

• Strong scripting/automation skills (Python, PowerShell, Bash) and experience with the CrowdStrike Falcon API for integration and automation.

• Ability to investigate complex security issues and drive resolutions; excellent communication and cross-functional collaboration skills.

• CrowdStrike certifications (e.g., CCFA / CCFR / CCFH ) are preferred.

Skills and Experience:

• Hands-on experience with AWS, Azure security and Windows, Linux, and macOS endpoint security (Intune and Jamf managed environments under Falcon).

• Extensive experience managing firewalls and developing host firewall policies via Falcon Firewall Management.

• Experienced is incident response, leading cyber security incidents through different stages of an incident lifecycle.

• Experienced with Identity Threat Protection, privileged access, AI Security for Workforce.

• 5 + years of implementation and management experience of EDR / XDR solutions.

• 12+ years of Information Security experience in a diverse range of technology environment

About Bloom Energy:

Bloom Energy will make clean, reliable energy affordable for everyone in the world. Our technology, f irst developed for NASA's Mars Program, will dramatically change the way that the world’s energy is produced, distributed and consumed.  Bloom’s unique on-site power generation systems are among the most efficient on the planet, providing significantly reduced operating costs and producing dramatically lower greenhouse gas emissions.  Pioneering a new class of stationary fuel cells, Bloom is not just creating a new product or company; it is driving a whole new industry.  

As one of Silicon Valley’s most promising startups, Bloom was the first clean energy technology investment for Kleiner Perkins and NEA, two of Silicon Valley’s most revered venture capital firms.  The company has assembled a super-star board, experienced management team, and top-notch technical staff. Bloom Energy is growing quickly and is looking to add to its dynamic team.

Bloom Energy is an equal opportunity employer and makes employment decisions on the basis of merit. We are committed to compliance with all applicable laws providing equal employment opportunities. Bloom Energy makes reasonable accommodation, consistent with applicable laws, for the known physical or mental limitations of an otherwise qualified applicant or employee with a disability, who can perform the essential job functions, unless undue hardship results.