Senior Security Application Engineer Automation & Detection

Agentic Detection & Response Engineering

• Define and own detection coverage strategy establish detection standards naming conventions and quality criteria for the SOC and Product Security program. 

• Map the threat landscape to MITRE ATT&CK TTP coverage; prioritize detection development against real adversary behaviors and threat intelligence; maintain ATT&CK coverage heatmaps and track MTTD and false positive rates as operational KPIs. 

• Build and ship agentic detection and response own the full lifecycle from threat use case through detections-as-code automated triage and production agentic response workflows. 

• Design and govern AI agent identity and delegation architect the end-to-end lifecycle for non-human identities operating in the security environment including scoped delegation audit logging and kill-switch controls. 

• Apply MITRE ATLAS adversarial ML techniques to threat-model all agent deployments; validate guardrails against OWASP Top 10 for LLM Applications and OWASP Top 10 for Agentic AI. 

Product Security & Cryptographic Infrastructure 

• Support and enhance Solidigms Product Security & Code Signing platform the cryptographic foundation for firmware signing device identity (EJBCA/PKI) attestation (COSE/CBOR LMS PQC/ML-DSA) and unlock (CRAM/ADU) across all product lines. 

• Build and maintain automation for signing pipelines HSM health monitoring certificate lifecycle management and access provisioning workflows integrated into CI/CD. 

• Contribute to PQC adoption ML-DSA LMS/LMOD CNSA 2.0 and OCP 3.0 readiness by developing and shipping the automation and tooling that operationalizes these standards. 

• Own and evolve the security data platform supporting cryptographic governance: signing telemetry KPI dashboards audit logging and anomaly detection for signing infrastructure. 

• Architect and govern AI agent integrations within the code signing and cryptographic operations environment scoped identity delegation controls and human-oversight mechanisms for any automation touching signing or key operations. 

Application & Product Security Integration 

• Embed across firmware engineering CI/CD and manufacturing teams delivering security controls pipeline integrations and attestation automation directly in their environments. 

• Integrate security requirements (SAST SBOM generation and validation attestation signing supply-chain controls) across firmware build and release pipelines. 

• Validate security controls through adversary emulation and purple team exercises; close coverage gaps identified through testing and operational feedback. 

• Operate within and strengthen NIST AI RMF OWASP Top 10 for LLM Applications NIST FIPS 140-3 NSA CNSA 2.0 OCP 2.5 to 3.0 and ISO 27001/SOX ITGC governance gates. 

Technical Leadership & Expectations 

• Lead security program components and define detection automation and cryptographic governance standards not just execute them. 

• Shape the product and application security engineering roadmap through threat modeling control design and input to the Cryptographic Architecture Board and security roadmap. 

• Serve as initial point of contact for cross-team security engineering projects; align technical outcomes with business requirements across firmware manufacturing and operations. 

• Mentor MSP analysts junior security engineers and firmware engineers on agentic patterns detection best practices and cryptographic operational hygiene multiplying team effectiveness. 

• Champion good engineering habits (TDD security-by-design tech debt balance agile) within and beyond the security team; uphold standards that set a benchmark for excellence. 

• Work with Engineering Managers and the Product & App Security Lead to define priorities roadmap and resource allocation; be accountable for high quality in team output. 

Force-Multiply Managed Services & Operational Partners 

• Build supervised automations that expand analyst and operator capacity under oversight replacing L1 toil with agents and lowering cost-to-serve while maintaining Solidigm governance and visibility. 

• Develop and maintain operational runbooks training materials and knowledge documentation to build resilient team capabilities and reduce single-person knowledge concentration risk. 

• Participate in daily weekly and monthly governance rhythms: ops standups KPI reporting quarterly CISO reviews and the Cryptographic Architecture Board. 

Qualifications :

• Software development proficiency  Python preferred; API integration; infrastructure-as-code; CI/CD pipeline development. This is a development role. Expected experience: 46 years of relevant hands-on work. 

• Security engineering depth detection engineering SIEM/SOAR platforms (Microsoft Sentinel and/or Splunk) and incident response workflows. Comfortable owning the detection lifecycle end-to-end. 

• MITRE ATT&CK depth TTP mapping kill chain coverage analysis and detection-to-technique alignment; ability to build and maintain ATT&CK coverage heatmaps and report on TTP coverage gaps. 

• MITRE ATLAS depth adversarial ML threat modeling for AI systems and agents including model evasion data poisoning prompt injection AI supply-chain compromise and agent-specific attack vectors. 

• AI/agent development experience hands-on building with agent frameworks RAG pipelines or agentic orchestration in production environments. 

• AI security governance knowledge NIST AI RMF; OWASP Top 10 for LLM Applications (LLM01LLM10); OWASP Top 10 for Agentic AI; AI safety control design including guardrails human oversight mechanisms and secure orchestration. 

• Cryptographic and PKI fundamentals working knowledge of HSM operations certificate lifecycle management code signing pipelines and PKI concepts (CA hierarchies certificate policies key management). 

• Cross-functional leadership  demonstrated ability to lead technical decisions for a functional domain influence decisions in adjacent domains and align technical outcomes with business requirements (IC7 Communication & Leadership standard). 

• Field/embedded delivery mindset comfortable embedding with operational and engineering teams shipping in partner-controlled environments and coaching across technical levels. 

Preferred Qualifications

• Hands-on experience with HSM platforms Entrust nShield Fortanix DSM or comparable; HSM cluster operations ACS card lifecycle key import/export workflows. 

• PKI and certificate management EJBCA/KeyFactor Venafi or comparable; manufacturing device identity injection MTKI/sub-CA hierarchies certificate expiry management. 

• Code signing pipeline experience firmware or binary signing (COSE/CBOR Authenticode or comparable); SBOM generation and signing; attestation workflows. 

• Post-quantum cryptography (PQC) practical experience with ML-DSA LMS/LMOD or hybrid crypto schemes; familiarity with CNSA 2.0 and NIST PQC standards. 

• Compliance framework experience NIST FIPS 140-3 NSA CNSA 2.0 OCP 2.5/3.0 ISO 27001 SOX ITGC. 

• Microsoft security stack  Defender XDR Microsoft Sentinel ( Data Lake) Security Copilot Logic Apps; KQL; Azure. 

• Splunk SPL log forwarding content/detection management and index administration. 

• Agentic tooling Model Context Protocol (MCP) Security Copilot plugins LangChain or comparable security-native agent orchestration and connector frameworks. 

• Non-human identity (NHI) & workload identity Entra Workload Identities Okta or comparable; service principal and managed-identity lifecycle management. 

• Prior FDE solutions-engineering detection-engineering or product security engineering role in an enterprise manufacturing or hardware product environment. 

Additional Information :

Powered by SmartRecruiters - Candidate Privacy Policy

Remote Work :

No

Employment Type :

Full-time