Senior Staff Security Engineer
Form Energy · Berkeley, CA
About this role
**Senior Staff Security Engineer** **About Form Energy** Form Energy is revolutionizing energy storage with cost-effective, multi-day technology for grid security and reliability. Named a TIME "Best Invention" and MIT Technology Review "Top Climate Tech Company To Watch." **The Role** Operate as an elite individual contributor balancing hands-on systems software development (50%) with high-assurance threat modeling, protocol verification, and security design/analysis (50%). Design and verify secure communication middleware and OTA update plans for asset edge controllers, building zero-trust architectures resilient against nation-state level adversaries. **Key Responsibilities** • Secure Middleware Engineering: Write production-grade, memory-safe systems code (C, C++, Rust) for asset edge hardware with Hardware Security Engines/Modules • Asynchronous Protocol Architecture: Evaluate and adapt Delay-Disruption Tolerant Networking standards; implement custom transport solutions • Cryptographic Disruption Handling: Build defensive state machines for offline replay prevention, certificate management, and secure data queuing • High-Assurance Analysis & Verification: Apply static analysis, threat modeling, and formal verification to cryptographic systems • Adversarial Threat Modeling: Design boundaries to withstand APTs and nation-state threats; account for hardware tampering and supply-chain risks **Required Qualifications** • 10+ years Cyber Security experience with architect-level decisions • 5+ years production-grade systems programming (C, C++, or Rust) • Applied cryptography expertise (symmetric/asymmetric primitives, mutual TLS, distributed edge-to-cloud systems) • 2+ years Application Security experience • 2+ years security tooling development • Direct experience with hardware root-of-trust, secure boot, firmware signing, HSMs/HSEs/TPMs • High-assurance mindset with rigorous software architecture focus **Preferred Qualifications** • Aerospace, Defense, Financial, Semiconductor, or Intelligence Community experience • Embedded programming in resource-constrained environments • Network resilience, store-and-forward, mesh topologies, or DTN protocols • Formal verification frameworks and protocol simulation tools • Go experience in cloud-scale environments • Knowledge of NERC CIP, ISA 62443, NIST standards **Benefits** 100% medical, dental, vision premiums for employees; 80% for dependents. 12+ weeks paid parental leave. Generous vacation. Stock options. Relocation assistance available. **Note:** No active U.S. government security clearance required. Not a GRC role.
Listing freshness
CronJobs last confirmed this listing 23h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.