Senior Security Application Engineer – Automation & Detection

🔥 17 hours ago

🏄 California – Remote

🏄 California – Remote

💵 $105.4k - $164.8k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Solidigm

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2021

🏭 Manufacturing

💼 Consulting

🔧 Hardware

Manufacturing • Consulting • Hardware

Solidigm is a leading provider of high-performance data storage solutions, tailored for the AI era. The company specializes in developing ultra-fast storage solutions designed to tackle demanding workloads and enhance AI data pipelines. Solidigm's portfolio includes products like data center SSDs, PCIe SSDs, and innovative storage technologies optimized for both edge and core applications. Their storage solutions are aimed at revolutionizing data management, allowing for instantaneous data movement and improved computational efficiency. As a trademark of SK hynix NAND Product Solutions Corp. , Solidigm is committed to advancing the limits of storage technology and aiding businesses in deploying their critical data more effectively.

📋 Description

• Define and own detection coverage strategy, standards, naming conventions, and quality criteria for SOC and Product Security programs • Map the threat landscape to MITRE ATT&CK TTP coverage and prioritize detection development • Maintain ATT&CK coverage heatmaps and track MTTD and false positive rates • Build and ship agentic detection and response across the full lifecycle, from threat use cases through detections-as-code, automated triage, and production response workflows • Design and govern AI agent identity and delegation, including scoped delegation, audit logging, and kill-switch controls • Threat-model agent deployments using MITRE ATLAS and validate guardrails against OWASP standards • Support and enhance Solidigm’s Product Security & Code Signing platform for firmware signing, device identity, attestation, and unlock operations • Build automation for signing pipelines, HSM health monitoring, certificate lifecycle management, and access provisioning integrated into CI/CD • Contribute to post-quantum cryptography adoption and operationalize related standards • Own and evolve the security data platform for cryptographic governance, telemetry, KPI dashboards, audit logging, and anomaly detection • Govern AI agent integrations in code-signing and cryptographic operations environments • Embed security controls and pipeline integrations across firmware engineering, CI/CD, and manufacturing teams • Integrate SAST, SBOM generation and validation, attestation signing, and supply-chain controls into firmware build and release pipelines • Validate controls through adversary emulation and purple team exercises • Operate within and strengthen NIST, OWASP, FIPS, CNSA, OCP, ISO 27001, and SOX ITGC governance gates • Lead security program components and define detection, automation, and cryptographic governance standards • Shape the product and application security engineering roadmap through threat modeling and control design • Serve as initial contact for cross-team security engineering projects and align technical outcomes with business requirements • Mentor MSP analysts, junior security engineers, and firmware engineers • Champion TDD, security-by-design, agile practices, and balanced technical debt management • Work with Engineering Managers and the Product & App Security Lead on priorities, roadmap, and resource allocation • Build supervised automations to expand analyst and operator capacity under oversight • Develop operational runbooks, training materials, and knowledge documentation • Participate in operational standups, KPI reporting, quarterly CISO reviews, and Cryptographic Architecture Board meetings

🎯 Requirements

• B.S. Degree in Information Security, Cybersecurity, Computer Science, Software Engineering, or related fields • Advanced English level (mandatory) • 4–6+ years of relevant hands-on work • Software development proficiency; Python preferred • API integration experience • Infrastructure-as-code experience • CI/CD pipeline development experience • Security engineering depth in detection engineering, SIEM/SOAR platforms, and incident response workflows • MITRE ATT&CK expertise, including TTP mapping, kill chain coverage analysis, detection-to-technique alignment, ATT&CK coverage heatmaps, and TTP coverage gap reporting • MITRE ATLAS expertise in adversarial ML threat modeling • Hands-on AI/agent development experience with agent frameworks, RAG pipelines, or agentic orchestration in production • AI security governance knowledge, including NIST AI RMF, OWASP Top 10 for LLM Applications, and OWASP Top 10 for Agentic AI • AI safety control design, guardrails, human oversight mechanisms, and secure orchestration • Cryptographic and PKI fundamentals, including HSM operations, certificate lifecycle management, code signing pipelines, and PKI concepts • Cross-functional leadership and ability to align technical outcomes with business requirements • Ability to embed with operational and engineering teams, ship in partner-controlled environments, and coach across technical levels • Preferred: HSM platforms such as Entrust nShield or Fortanix DSM • Preferred: PKI and certificate management platforms such as EJBCA/KeyFactor or Venafi • Preferred: Firmware or binary signing, SBOM generation and signing, and attestation workflows • Preferred: Post-quantum cryptography experience with ML-DSA, LMS/LMOD, or hybrid crypto schemes • Preferred: Compliance framework experience with NIST FIPS 140-3, NSA CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, or SOX ITGC • Preferred: Microsoft security stack, including Defender XDR, Microsoft Sentinel, Security Copilot, Logic Apps, KQL, and Azure • Preferred: Splunk, SPL, log forwarding, content/detection management, and index administration • Preferred: Agentic tooling such as MCP, Security Copilot plugins, LangChain, or comparable frameworks • Preferred: Non-human identity and workload identity platforms such as Entra Workload Identities or Okta • Preferred: Prior FDE, solutions-engineering, detection-engineering, or product security engineering role in enterprise manufacturing or hardware product environments

🏖️ Benefits

• Remote work option • Inclusive, diverse, equitable workplace culture • Opportunities to contribute to innovative products and business value • Mentorship and professional growth opportunities