{bc}
Apply
smartrecruiters

Senior Security Application Engineer - Automation & Detection

Solidigm
Rancho Cordova, USA
Full-time
Senior · 4+ years experience
Remote
Discovered 3 weeks ago
azurelangchainoktapythonsplunk

Full Job Posting

Preferred Qualifications

  • Hands-on experience with HSM platforms — Entrust nShield, Fortanix DSM, or comparable; HSM cluster operations, ACS card lifecycle, key import/export workflows.
  • PKI and certificate management — EJBCA/KeyFactor, Venafi, or comparable; manufacturing device identity injection, MTKI/sub-CA hierarchies, certificate expiry management.
  • Code signing pipeline experience — firmware or binary signing (COSE/CBOR, Authenticode, or comparable); SBOM generation and signing; attestation workflows.
  • Post-quantum cryptography (PQC) — practical experience with ML-DSA, LMS/LMOD, or hybrid crypto schemes; familiarity with CNSA 2.0+ and NIST PQC standards.
  • Compliance framework experience — NIST FIPS 140-3, NSA CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, SOX ITGC.
  • Microsoft security stack — Defender XDR, Microsoft Sentinel (+ Data Lake), Security Copilot, Logic Apps; KQL; Azure.
  • Splunk — SPL, log forwarding, content/detection management, and index administration.
  • Agentic tooling — Model Context Protocol (MCP), Security Copilot plugins, LangChain, or comparable security-native agent orchestration and connector frameworks.
  • Non-human identity (NHI) & workload identity — Entra Workload Identities, Okta, or comparable; service principal and managed-identity lifecycle management.
  • Prior FDE, solutions-engineering, detection-engineering, or product security engineering role in an enterprise manufacturing or hardware product environment.
  • Powered by SmartRecruiters - Candidate Privacy Policy
  • Join a multibillion-dollar global company that brings together amazing technology, people, and operational scale to become a powerhouse in the memory industry. Headquartered in Rancho Cordova, California, Solidigm combines elements of an established, successful technology company with the spirit, agility, and entrepreneurial mindset of a start-up. In addition to the U.S. headquarters and other facilities in the U.S., the company has international presence in Asia, Europe, and the Americas. Solidigm will continue to lead the world in innovating new Memory technologies with aspirations to be the #1 NAND memory company in the world. At Solidigm, we view problems as opportunities to define innovative solutions that hold the power to change the world and unleash the potential technological needs that the future holds. At Solidigm, we are One Team that fosters a diverse, equitable, and inclusive culture that embraces individual uniqueness and empowers us to bring our best selves to deliver excellence in support of Solidigm's vision and mission to be the go-to partner for optimized data storage solutions. You can be part of the takeoff of an innovative business that develops cutting-edge products, delivers strong business value for customers, provides an engaging workplace for its employees, and serves a greater impact on the world. This is a golden opportunity for the right applicant to join us and help design, build, and lead Solidigm. We want a diverse team of dedicated professionals who will not just be Solidigm team members but contribute to how we shape the future of the organization. We are seeking applicants who will grow and thrive in our culture; be customer inspired, trusting, innovative, team-oriented, inclusive, results driven, collaborative, passionate, and flexible.

Qualifications

  • B.S. Degree in Information Security, Cybersecurity, Computer Science, Software Engineering, or related fields.
  • Advanced English level (mandatory).
  • Software development proficiency — Python preferred; API integration; infrastructure-as-code; CI/CD pipeline development. Expected experience: 4–6+ years of relevant hands-on work.
  • Security engineering depth — detection engineering, SIEM/SOAR platforms (Microsoft Sentinel and/or Splunk), and incident response workflows. Comfortable owning the detection lifecycle end-to-end.
  • MITRE ATT&CK depth — TTP mapping, kill chain coverage analysis, and detection-to-technique alignment; ability to build and maintain ATT&CK coverage heatmaps and report on TTP coverage gaps.
  • MITRE ATLAS depth — adversarial ML threat modeling for AI systems and agents, including model evasion, data poisoning, prompt injection, AI supply-chain compromise, and agent-specific attack vectors.
  • AI/agent development experience — hands-on building with agent frameworks, RAG pipelines, or agentic orchestration in production environments.
  • AI security governance knowledge — NIST AI RMF; OWASP Top 10 for LLM Applications (LLM01–LLM10); OWASP Top 10 for Agentic AI; AI safety control design including guardrails, human oversight mechanisms, and secure orchestration.
  • Cryptographic and PKI fundamentals — working knowledge of HSM operations, certificate lifecycle management, code signing pipelines, and PKI concepts (CA hierarchies, certificate policies, key management).
  • Cross-functional leadership — demonstrated ability to lead technical decisions for a functional domain, influence decisions in adjacent domains, and align technical outcomes with business requirements (IC7 Communication & Leadership standard).
  • Field/embedded delivery mindset — comfortable embedding with operational and engineering teams, shipping in partner-controlled environments, and coaching across technical levels.
  • Hands-on experience with HSM platforms — Entrust nShield, Fortanix DSM, or comparable; HSM cluster operations, ACS card lifecycle, key import/export workflows.
  • PKI and certificate management — EJBCA/KeyFactor, Venafi, or comparable; manufacturing device identity injection, MTKI/sub-CA hierarchies, certificate expiry management.
  • Code signing pipeline experience — firmware or binary signing (COSE/CBOR, Authenticode, or comparable); SBOM generation and signing; attestation workflows.
  • Post-quantum cryptography (PQC) — practical experience with ML-DSA, LMS/LMOD, or hybrid crypto schemes; familiarity with CNSA 2.0+ and NIST PQC standards.
  • Compliance framework experience — NIST FIPS 140-3, NSA CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, SOX ITGC.
  • Microsoft security stack — Defender XDR, Microsoft Sentinel (+ Data Lake), Security Copilot, Logic Apps; KQL; Azure.
  • Splunk — SPL, log forwarding, content/detection management, and index administration.
  • Agentic tooling — Model Context Protocol (MCP), Security Copilot plugins, LangChain, or comparable security-native agent orchestration and connector frameworks.
  • Non-human identity (NHI) & workload identity — Entra Workload Identities, Okta, or comparable; service principal and managed-identity lifecycle management.
  • Prior FDE, solutions-engineering, detection-engineering, or product security engineering role in an enterprise manufacturing or hardware product environment.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Solidigm

Firmware Engineer

Vancouver, CAN

Discovered TodayFull-time

Facilities Manager

Vancouver, CAN

Discovered TodayFull-time

Business Operations Manager

Rancho Cordova, USA

Discovered 4 days agoFull-time

Facilities Manager

Vancouver, CAN

Discovered 4 days agoFull-time

Firmware Engineer

Vancouver, CAN

Discovered 6 days agoFull-time

Income Tax Manager

San Jose, USA

Discovered 1 weeks agoFull-time

Senior People Analytics Engineer

Rancho Cordova, USA

Discovered 1 weeks agoFull-time

Sr Firmware Engineer

Rancho Cordova, USA

Discovered 2 weeks agoFull-time