20 hours ago
Remote, United States or Rancho Cordova, CA, USASenior
Responsibilities
- Define and own detection coverage strategy, standards, naming conventions, quality criteria, ATT&CK mappings, coverage heatmaps, and operational KPIs.
- Build and ship detections-as-code, automated triage, and production agentic detection and response workflows.
- Design and govern AI agent identity, delegation, audit logging, human oversight, and kill-switch controls.
- Support and enhance the product security and code-signing platform covering firmware signing, device identity, attestation, unlock workflows, and cryptographic operations.
- Build automation for signing pipelines, HSM monitoring, certificate lifecycle management, access provisioning, CI/CD integration, and cryptographic governance telemetry.
- Develop tooling for post-quantum cryptography adoption and maintain security data platforms, dashboards, audit logs, and anomaly detection.
- Embed with firmware engineering, CI/CD, and manufacturing teams to integrate SAST, SBOM, attestation, and supply-chain security controls.
- Validate controls through adversary emulation and purple team exercises and close detection and security coverage gaps.
- Lead security program components, define technical standards, shape roadmaps, influence architecture decisions, and mentor analysts and engineers.
- Build supervised automations, runbooks, training materials, and documentation while participating in governance and architecture-board routines.
Requirements
- Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Software Engineering, or a related field.
- 4–6+ years of relevant hands-on experience.
- Advanced English proficiency is mandatory.
- Proficiency in software development, preferably Python, as well as API integration, infrastructure-as-code, and CI/CD pipeline development.
- Hands-on security engineering experience with detection engineering, SIEM/SOAR platforms such as Microsoft Sentinel or Splunk, and incident response workflows.
- Depth in MITRE ATT&CK TTP mapping, kill-chain coverage analysis, detection alignment, heatmaps, and coverage-gap reporting.
- Depth in MITRE ATLAS and adversarial ML threat modeling, including model evasion, data poisoning, prompt injection, AI supply-chain compromise, and agent-specific attacks.
- Hands-on production experience building AI agents, agent frameworks, RAG pipelines, or agentic orchestration.
- Knowledge of NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic AI, guardrails, human oversight, and secure orchestration.
- Working knowledge of HSM operations, certificate lifecycle management, code-signing pipelines, PKI concepts, CA hierarchies, certificate policies, and key management.
- Ability to lead technical decisions, influence adjacent domains, align outcomes with business requirements, embed with partner teams, and coach across technical levels.
- Preferred experience with Entrust nShield, Fortanix DSM, EJBCA, KeyFactor, Venafi, firmware or binary signing, SBOM signing, attestation, ML-DSA, LMS/LMOD, hybrid cryptography, and NIST PQC standards.
- Preferred experience with NIST FIPS 140-3, NSA CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, and SOX ITGC.
- Preferred experience with Microsoft Defender XDR, Microsoft Sentinel Data Lake, Security Copilot, Logic Apps, KQL, Azure, Splunk SPL, log forwarding, content management, detection management, and index administration.
- Preferred experience with Model Context Protocol, Security Copilot plugins, LangChain, Entra Workload Identities, Okta, service principals, and managed identities.
- Prior FDE, solutions engineering, detection engineering, or product security engineering experience in enterprise manufacturing or hardware-product environments is preferred.
About Solidigm
Solidigm designs and manufactures NAND flash memory and solid-state drives for data center, enterprise, and client computing markets. Its portfolio spans high-capacity and high-endurance SSDs with supporting firmware/software sold to OEMs and hyperscale cloud providers. Formed in 2021 from Intel’s NAND business, Solidigm operates as a U.S. subsidiary of SK hynix, with global R&D developing SoCs and controllers for its drives.