Security Engineer, Principal Member of Technical Staff (CA, US, 95131)

Security Engineer, Principal Member of Technical Staff Job Details | QuantumScape Corporation By continuing to use and navigate this website, you are agreeing to the use of cookies. Accept Close Skip to main content View Profile CAREERS SIGN IN View Profile CAREERS SIGN IN View Profile CAREERS SIGN IN Search by Keyword Search by Location Show More Options Loading... Business Unit All Division All Department All Location Type All Select how often (in days) to receive an alert: Create Alert × Select how often (in days) to receive an alert: Apply now » Title: Security Engineer, Principal Member of Technical Staff Date: Jun 2, 2026 Location: CA, US, 95131 Work Location Type: On-site Company: QuantumScape Corporation Description: QuantumScape is on a mission to transform energy storage with solid-state lithium-metal battery technology. The company’s next-generation batteries are designed to enable greater energy density, faster charging and enhanced safety to support the transition away from legacy energy sources toward a lower carbon future.

About

the team : Our Cybersecurity Team sits at the intersection of innovation and protection. We are a driven, collaborative group of security professionals embedded across the business, working shoulder-to-shoulder with engineering, software, cloud, and automation teams to build security into everything we do from the ground up. If you're passionate about solving hard security problems in a fast-moving, deeply technical environment, you'll feel right at home here. What we need: W e need a security engineer who stays ahead of threats, responds decisively when incidents occur, and builds the systems and processes that make us harder to attack every day. Here's what that looks like in this role: Serve as a key responder and coordinator during security incidents, leading investigations from detection through containment, eradication, and recovery Build and mature a threat intelligence capability that turns raw signals into actionable insights for the business Own vulnerability management end-to-end from discovery and prioritization to driving remediation across engineering and infrastructure teams Harden network environments by identifying gaps, enforcing segmentation, and ensuring monitoring coverage across on-premises and cloud-connected infrastructure Translate complex threat and risk data into clear, prioritized guidance for both technical teams and senior leadership Proactively hunt for threats and misconfigurations before they become incidents Communicate with clarity and confidence across all levels of the organization, adapting your message to your audience Take problems all the way to resolution not just to identification following through, closing loops, and holding yourself and others accountable What You’ll do: As a Principal Security Engineer, you will be a key contributor and trusted advisor across incident management, network security, threat intelligence, and vulnerability management. You will partner with cross-functional teams to reduce risk, improve detection and response capabilities, and build a proactive security posture at scale. Incident Management Lead end-to-end incident response activities including triage, investigation, containment, eradication, and post-incident review Develop, maintain, and continuously improve incident response plans, playbooks, and runbooks Coordinate cross-functional response efforts across IT, engineering, legal, and leadership during active incidents Conduct thorough root cause analysis and drive post-incident improvements to prevent recurrence Maintain and improve SIEM configurations, alert logic, and detection rules to reduce noise and improve fidelity Track incident metrics and report on response trends, dwell time, and program maturity over time Network Security Assess and harden network architecture across on-premises and cloud-connected environments, ensuring alignment with security best practices Design and enforce network segmentation strategies, including zero-trust principles and perimeter controls Monitor network traffic for anomalous behavior and lead investigation of network-based threats Partner with IT and infrastructure teams on firewall policy management, VPN architecture, and secure remote access controls Evaluate and improve network visibility tooling including IDS/IPS, NDR, and packet capture capabilities Provide security guidance on network architecture decisions, including SD-WAN, cloud interconnects, and OT/IT boundary controls Threat Intelligence Build and operationalize a threat intelligence program that delivers timely, relevant, and actionable intelligence to security and engineering teams Collect, analyze, and synthesize intelligence from internal telemetry, open-source feeds, commercial platforms, and industry sharing communities (e.g., ISACs) Develop threat profiles and adversary models relevant to QuantumScape's industry, technology stack, and risk landscape Drive intelligence-informed detections by translating TTPs into SIEM rules, detection logic, and hunting hypotheses Produce and deliver threat briefings to technical teams and senior leadership with clear, prioritized recommendations Support proactive threat hunting activities using threat intelligence to guide hypothesis generation and investigation Vulnerability Management Own and mature the vulnerability management program across cloud, on-premises, and endpoint environments Operate and tune vulnerability scanning tools (e.g., Tenable, Qualys, or equivalent) to ensure comprehensive and accurate coverage Develop risk-based prioritization frameworks that account for asset criticality, exploitability, and business context Partner with engineering, IT, and cloud teams to drive timely remediation and track progress against SLAs Produce clear vulnerability reporting and dashboards for both technical owners and leadership stakeholders Identify systemic gaps and structural risk drivers and recommend durable remediation strategies beyond patch-by-patch fixes Advisory & Cross-Functional Enablement Act as a security advisor to engineering, infrastructure, and IT teams translating complex security