Senior Manager, Security Operations Center

Senior Manager, Security Operations Center (SOC) Location: San Jose, CA – fully on‑site, in‑office 5 days a week. Reporting to the Chief Security Officer, this role leads Bloom Energy’s cybersecurity defense program. Responsibilities Oversee 24/7/365 SOC operations and lead a team of analysts performing detection, triage, escalation, monitoring, and incident response coordination. Own administration, fine‑tuning, and optimization of SOC tools, including SIEM, SOAR, EUBA, threat intelligence, data pipelines, security data lake, and NDR. Lead the transformation of the SOC into an AI‑powered SOC. Develop detailed incident‑response playbooks and implement continuous monitoring and reporting procedures. Manage day‑to‑day SOC operations, staffing all shifts, and ensure continuous monitoring of Bloom Energy networks and systems for security events and anomalies. Lead analysts in event detection, triage, escalation, and coordination with incident‑response teams. Implement and maintain SOC standard operating procedures (SOPs), playbooks, and escalation protocols. Ensure timely and accurate analysis of alerts from SIEM, EDR, and network monitoring tools such as NDR. Coordinate with cybersecurity, IT operations, NOC, GRC, and risk‑management teams to maintain an integrated defense posture. Oversee SOC training programs to ensure analyst proficiency in threat detection, correlation, and response processes. Manage the hand‑off process between shifts and conduct root‑cause and trend analysis on incidents. Prepare and regularly report SOC‑related metrics, KPIs, and KRIs. Deliver daily, weekly, monthly, and quarterly operational reports and briefings to senior management. Advise leadership on emerging threats, attack trends, and SOC performance metrics. Drive continuous improvement of monitoring coverage, use cases, and automation within SOC tools and workflows. Required Qualifications Bachelor’s degree in cybersecurity, information systems, or a related technical field or 12‑15years of experience in cybersecurity, including security operations, analysis, and incident‑response. 5+years of experience managing a Security Operations Center team. Proficiency with SOC tools such as SIEM, SOAR, IDS/IPS, EDR, NDR, threat intelligence, and incident‑response platforms. Proven ability to coordinate cross‑functional teams during incident‑response and recovery. Experience managing a 24/7 SOC. Familiarity with Splunk, Recorded Future, Elastic, Tenable, and SOAR platforms. Knowledge of MITRE ATT&CK and NIST800‑61 (Computer Security Incident Handling Guide). Experience implementing SOC metrics, KPIs, and automation strategies. Leadership, communication, and presentation skills, with the ability to brief senior leadership. Nice to Have Certifications GCFA, GCIA, GICSP Splunk or other SIEM certifications Benefits Competitive medical, dental, and vision plans with large employer contribution 401(k) retirement plan with company match Mental health support services Legal services Virtual physical therapy access Fertility and family‑forming benefits EEO Statement Bloom Energy is an equal‑opportunity employer and makes employment decisions on the basis of merit. We are committed to compliance with all applicable laws providing equal employment opportunities. All qualified applicants, will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or disability. Bloom Energy makes reasonable accommodations, consistent with applicable laws, for the known physical or mental limitations of an otherwise qualified applicant or employee with a disability, unless undue hardship would result. Salary Salary Range: $178,800.00 – $257,200.00. #J-18808-Ljbffr