Senior Security Application Engineer - Automation & Detection

Solidigm•Rancho Cordova, CA

About The Position

Solidigm is seeking a Senior Security Application Engineer to lead security detection, automation, and cryptographic governance across its security program and product lines. The role owns detection strategy and the end-to-end delivery of agentic detection and response, including threat-informed coverage, detections-as-code, automated triage, and governed AI agent identity and delegation. It also supports Solidigm’s Product Security and Code Signing platform, which provides firmware signing, device identity, attestation, and unlock capabilities. The engineer will develop automation for signing pipelines, HSM monitoring, certificate lifecycle management, and access provisioning, while helping operationalize post-quantum cryptography standards. The position embeds with firmware engineering, CI/CD, and manufacturing teams to integrate security controls into build and release environments, including SAST, SBOM validation, attestation signing, and supply-chain controls. It includes validating controls through adversary emulation and purple team exercises and supporting governance frameworks and standards such as NIST AI RMF, OWASP, FIPS 140-3, CNSA 2.0+, OCP, ISO 27001, and SOX ITGC. This is a technical leadership role involving roadmap and standards development, cross-functional project coordination, mentorship, and accountability for the quality of team output. The engineer will also build supervised automations for operational partners, maintain runbooks and training materials, and participate in operational and governance reviews.

Requirements

B.S. degree in Information Security, Cybersecurity, Computer Science, Software Engineering, or a related field.
Advanced English proficiency is mandatory.
4–6+ years of relevant hands-on experience.
Software development proficiency, with Python preferred, plus API integration, infrastructure-as-code, and CI/CD pipeline development.
Security engineering experience in detection engineering, SIEM/SOAR platforms such as Microsoft Sentinel and/or Splunk, and incident response workflows.
Ability to own the detection lifecycle end-to-end.
Strong MITRE ATT&CK knowledge, including TTP mapping, kill chain coverage analysis, detection-to-technique alignment, coverage heatmaps, and reporting on coverage gaps.
Strong MITRE ATLAS knowledge, including adversarial ML threat modeling for AI systems and agents, model evasion, data poisoning, prompt injection, AI supply-chain compromise, and agent-specific attack vectors.
Hands-on AI or agent development experience with agent frameworks, RAG pipelines, or agentic orchestration in production environments.
Knowledge of AI security governance, including NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic AI, guardrails, human oversight, and secure orchestration.
Working knowledge of cryptographic and PKI fundamentals, including HSM operations, certificate lifecycle management, code-signing pipelines, CA hierarchies, certificate policies, and key management.
Demonstrated cross-functional leadership: ability to lead technical decisions in a functional domain, influence adjacent domains, and align technical outcomes with business requirements (IC7 Communication & Leadership standard).
Comfort embedding with operational and engineering teams, delivering in partner-controlled environments, and coaching people across technical levels.

Nice To Haves

Hands-on experience with HSM platforms such as Entrust nShield, Fortanix DSM, or comparable systems, including cluster operations, ACS card lifecycle, and key import/export workflows.
PKI and certificate management experience with EJBCA/KeyFactor, Venafi, or comparable tools; manufacturing device identity injection; MTKI/sub-CA hierarchies; and certificate expiry management.
Experience with firmware or binary code-signing pipelines, including COSE/CBOR, Authenticode, or comparable technologies; SBOM generation and signing; and attestation workflows.
Practical post-quantum cryptography experience with ML-DSA, LMS/LMOD, or hybrid cryptographic schemes, and familiarity with CNSA 2.0+ and NIST PQC standards.
Experience with NIST FIPS 140-3, NSA CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, or SOX ITGC compliance frameworks.
Experience with Microsoft security tools, including Defender XDR, Microsoft Sentinel and Data Lake, Security Copilot, Logic Apps, KQL, or Azure.
Splunk experience with SPL, log forwarding, content and detection management, and index administration.
Agentic tooling experience with Model Context Protocol (MCP), Security Copilot plugins, LangChain, or comparable security-native agent orchestration and connector frameworks.
Non-human identity and workload identity experience with Entra Workload Identities, Okta, or comparable platforms, including service principal and managed-identity lifecycle management.
Prior FDE, solutions-engineering, detection-engineering, or product security engineering experience in an enterprise manufacturing or hardware product environment.

Responsibilities

Define and own detection coverage strategy, standards, naming conventions, and quality criteria for SOC and Product Security programs.
Map threat activity to MITRE ATT&CK, prioritize detection development, maintain coverage heatmaps, and track operational KPIs such as MTTD and false positive rates.
Build and ship agentic detection and response workflows, owning the lifecycle from threat use case through detections-as-code, automated triage, and production response.
Architect and govern AI agent identity and delegation, including scoped permissions, audit logging, and kill-switch controls.
Threat-model AI agent deployments using MITRE ATLAS and validate guardrails against OWASP guidance for LLM applications and agentic AI.
Support and enhance the Product Security and Code Signing platform for firmware signing, device identity, attestation, and unlock across product lines.
Build and maintain automation for signing pipelines, HSM health monitoring, certificate lifecycle management, and access provisioning integrated with CI/CD.
Develop and ship tooling to operationalize post-quantum cryptography adoption and related standards readiness.
Own and evolve the security data platform for cryptographic governance, including signing telemetry, KPI dashboards, audit logging, and anomaly detection.
Govern AI agent integrations in code-signing and cryptographic operations, including scoped identity, delegation controls, and human oversight.
Integrate security controls and requirements across firmware build and release pipelines, including SAST, SBOM generation and validation, attestation signing, and supply-chain controls.
Validate security controls through adversary emulation and purple team exercises, and address identified coverage gaps.
Lead security program components and establish detection, automation, and cryptographic governance standards.
Shape the product and application security engineering roadmap through threat modeling, control design, and contributions to the Cryptographic Architecture Board and security roadmap.
Serve as an initial point of contact for cross-team security engineering projects and align technical outcomes with business requirements.
Mentor managed service provider analysts, junior security engineers, and firmware engineers on agentic patterns, detection practices, and cryptographic operational hygiene.
Promote sound engineering practices, including test-driven development, security-by-design, balanced technical debt, and agile methods.
Work with Engineering Managers and the Product & App Security Lead to define priorities, roadmap, and resource allocation; ensure high-quality team output.
Build supervised automations that expand analyst and operator capacity while maintaining governance and visibility.
Develop and maintain operational runbooks, training materials, and knowledge documentation.
Participate in daily, weekly, and monthly governance activities, including operations standups, KPI reporting, quarterly CISO reviews, and Cryptographic Architecture Board meetings.