Senior Security Application Engineer - Automation & Detection

Agentic Detection & Response Engineering

• Define and own detection coverage strategy — establish detection standards, naming conventions, and quality criteria for the SOC and Product Security program.

• Map the threat landscape to MITRE ATT&CK TTP coverage; prioritize detection development against real adversary behaviors and threat intelligence; maintain ATT&CK coverage heatmaps and track MTTD and false positive rates as operational KPIs.

• Build and ship agentic detection and response — own the full lifecycle from threat use case through detections-as-code, automated triage, and production agentic response workflows.

• Design and govern AI agent identity and delegation — architect the end-to-end lifecycle for non-human identities operating in the security environment, including scoped delegation, audit logging, and kill-switch controls.

• Apply MITRE ATLAS adversarial ML techniques to threat-model all agent deployments; validate guardrails against OWASP Top 10 for LLM Applications and OWASP Top 10 for Agentic AI.

Product Security & Cryptographic Infrastructure

• Support and enhance Solidigm's Product Security & Code Signing platform — the cryptographic foundation for firmware signing, device identity (EJBCA/PKI), attestation (COSE/CBOR, LMS, PQC/ML-DSA), and unlock (CRAM/ADU) across all product lines.

• Build and maintain automation for signing pipelines, HSM health monitoring, certificate lifecycle management, and access provisioning workflows integrated into CI/CD.

• Contribute to PQC adoption — ML-DSA, LMS/LMOD, CNSA 2.0+, and OCP 3.0+ readiness — by developing and shipping the automation and tooling that operationalizes these standards.

• Own and evolve the security data platform supporting cryptographic governance: signing telemetry, KPI dashboards, audit logging, and anomaly detection for signing infrastructure.

• Architect and govern AI agent integrations within the code signing and cryptographic operations environment — scoped identity, delegation controls, and human-oversight mechanisms for any automation touching signing or key operations.

Application & Product Security Integration

• Embed across firmware engineering, CI/CD, and manufacturing teams — delivering security controls, pipeline integrations, and attestation automation directly in their environments.

• Integrate security requirements (SAST, SBOM generation and validation, attestation signing, supply-chain controls) across firmware build and release pipelines.

• Validate security controls through adversary emulation and purple team exercises; close coverage gaps identified through testing and operational feedback.