Senior Security Application Engineer – Automation & Detection

This is a fully remote position, open to applicants in California.

📋 Description

• Define and take ownership of the detection coverage strategy, standards, naming conventions, and quality criteria for SOC and Product Security initiatives.

• Analyze the threat landscape to ensure coverage of MITRE ATT&CK TTP and prioritize the development of detection mechanisms.

• Keep ATT&CK coverage heatmaps up to date while monitoring Mean Time to Detection (MTTD) and false positive rates.

• Develop and implement proactive detection and response measures throughout the entire lifecycle, from threat use cases to detections-as-code, automated triage, and production response workflows.

• Design and oversee AI agent identity and delegation, ensuring scoped delegation, audit logging, and kill-switch controls are in place.

• Conduct threat modeling for agent deployments utilizing MITRE ATLAS and confirm compliance with OWASP standards for guardrails.

• Support and improve Solidigm’s Product Security & Code Signing platform designed for firmware signing, device identity, attestation, and unlock operations.

• Create automation processes for signing pipelines, HSM health monitoring, certificate lifecycle management, and access provisioning integrated into CI/CD workflows.

• Contribute to the adoption of post-quantum cryptography and operationalize the related standards.

• Manage and enhance the security data platform for cryptographic governance, telemetry, KPI dashboards, audit logging, and anomaly detection.

• Oversee AI agent integrations in environments related to code-signing and cryptographic operations.

• Integrate security controls and pipeline integrations across firmware engineering, CI/CD, and manufacturing teams.

• Incorporate SAST, SBOM generation and validation, attestation signing, and supply-chain controls into firmware build and release pipelines.

• Validate controls through adversarial emulation and purple team exercises.

• Operate within and enhance governance frameworks such as NIST, OWASP, FIPS, CNSA, OCP, ISO 27001, and SOX ITGC.

• Lead components of the security program and establish standards for detection, automation, and cryptographic governance.

• Influence the product and application security engineering roadmap through threat modeling and control design.

• Act as the primary contact for cross-team security engineering projects, aligning technical outcomes with business needs.

• Mentor MSP analysts, junior security engineers, and firmware engineers.

• Advocate for Test-Driven Development (TDD), security-by-design principles, agile methodologies, and responsible technical debt management.

• Collaborate with Engineering Managers and the Product & App Security Lead on project priorities, roadmap, and resource allocation.

• Develop supervised automations to enhance the capacity of analysts and operators while under oversight.

• Create operational runbooks, training materials, and knowledge documentation.

• Engage in operational standups, KPI reporting, quarterly CISO reviews, and meetings of the Cryptographic Architecture Board.

⛳️ Requirements

• Bachelor's Degree in Information Security, Cybersecurity, Computer Science, Software Engineering, or related fields.

• Proficient in English (mandatory).

• 4-6+ years of relevant hands-on experience.

• Proficiency in software development; Python is preferred.

• Experience with API integration.

• Familiarity with infrastructure-as-code practices.

• Experience in CI/CD pipeline development.

• Depth of knowledge in security engineering, particularly in detection engineering, SIEM/SOAR platforms, and incident response workflows.

• Expertise in MITRE ATT&CK, including TTP mapping, kill chain coverage analysis, detection-to-technique alignment, ATT&CK coverage heatmaps, and TTP coverage gap reporting.

• Proficient in MITRE ATLAS for adversarial ML threat modeling.

• Hands-on experience in AI/agent development with agent frameworks, RAG pipelines, or agentic orchestration in production environments.

• Knowledge of AI security governance, including NIST AI RMF, OWASP Top 10 for LLM Applications, and OWASP Top 10 for Agentic AI.

• Experience in designing AI safety controls, guardrails, human oversight mechanisms, and secure orchestration.

• Understanding of cryptographic and PKI fundamentals, including HSM operations, certificate lifecycle management, code signing pipelines, and PKI concepts.

• Strong cross-functional leadership skills and the ability to align technical outcomes with business requirements.

• Ability to work closely with operational and engineering teams, deliver in partner-controlled environments, and provide coaching across various technical levels.

• Preferred: Experience with HSM platforms like Entrust nShield or Fortanix DSM.

• Preferred: Familiarity with PKI and certificate management platforms such as EJBCA/KeyFactor or Venafi.

• Preferred: Experience in firmware or binary signing, SBOM generation and signing, and attestation workflows.

• Preferred: Background in post-quantum cryptography with ML-DSA, LMS/LMOD, or hybrid crypto schemes.

• Preferred: Knowledge of compliance frameworks such as NIST FIPS 140-3, NSA CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, or SOX ITGC.

• Preferred: Familiarity with the Microsoft security stack, including Defender XDR, Microsoft Sentinel, Security Copilot, Logic Apps, KQL, and Azure.

• Preferred: Experience with Splunk, SPL, log forwarding, content/detection management, and index administration.

• Preferred: Knowledge of agentic tooling such as MCP, Security Copilot plugins, LangChain, or similar frameworks.

• Preferred: Familiarity with non-human identity and workload identity platforms like Entra Workload Identities or Okta.

• Preferred: Previous experience in FDE, solutions-engineering, detection-engineering, or product security engineering roles within enterprise manufacturing or hardware product environments.

🏝️ Benefits

• Option for remote work.

• A workplace culture that is inclusive, diverse, and equitable.

• Opportunities to contribute to innovative products and create business value.

• Mentorship and professional development opportunities.