Senior Security Application Engineer – Automation & Detection

Solidigm

. Define and own detection coverage strategy, standards, naming conventions, and quality criteria for SOC and Product Security programs .

Posted 10/13/2026full-timeRemote • California • United StatesSenior💰 $105,440 - $164,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in detection engineering, threat modeling, and cryptographic governance, with a strong focus on integrating security controls into CI/CD pipelines and firmware engineering. Proficient in AI security governance and operationalizing standards across cross-functional teams.

Highest-signal resume keywords

MITRE ATT&CK ExpertisePython ProficiencyCI/CD Pipeline DevelopmentCryptographic GovernanceAI Security Governance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection EngineeringThreat ModelingAPI IntegrationInfrastructure-as-CodeIncident Response WorkflowsAdversarial ML Threat ModelingHSM OperationsCode Signing PipelinesPost-Quantum CryptographySecurity Engineering

Soft Skills

Cross-Functional LeadershipCoachingCommunication

Tools & Technologies

SIEM/SOAR PlatformsMicrosoft Security StackSplunkAgentic ToolingHSM Platforms

Certifications & Qualifications

B.S. Degree in Information SecurityNIST FIPS 140-3 ComplianceISO 27001 Compliance

Industry Keywords

Firmware SigningDevice IdentityAttestation WorkflowsKPI DashboardsOWASP Standards

Tech Stack

Tools & technologies

AzureCyber SecurityPythonSplunk

About the role

Key responsibilities & impact

Define and own detection coverage strategy, standards, naming conventions, and quality criteria for SOC and Product Security programs
Map the threat landscape to MITRE ATT&CK TTP coverage and prioritize detection development
Maintain ATT&CK coverage heatmaps and track MTTD and false positive rates
Build and ship agentic detection and response across the full lifecycle, from threat use cases through detections-as-code, automated triage, and production response workflows
Design and govern AI agent identity and delegation, including scoped delegation, audit logging, and kill-switch controls
Threat-model agent deployments using MITRE ATLAS and validate guardrails against OWASP standards
Support and enhance Solidigm’s Product Security & Code Signing platform for firmware signing, device identity, attestation, and unlock operations
Build automation for signing pipelines, HSM health monitoring, certificate lifecycle management, and access provisioning integrated into CI/CD
Contribute to post-quantum cryptography adoption and operationalize related standards
Own and evolve the security data platform for cryptographic governance, telemetry, KPI dashboards, audit logging, and anomaly detection
Govern AI agent integrations in code-signing and cryptographic operations environments
Embed security controls and pipeline integrations across firmware engineering, CI/CD, and manufacturing teams
Integrate SAST, SBOM generation and validation, attestation signing, and supply-chain controls into firmware build and release pipelines
Validate controls through adversary emulation and purple team exercises
Operate within and strengthen NIST, OWASP, FIPS, CNSA, OCP, ISO 27001, and SOX ITGC governance gates
Lead security program components and define detection, automation, and cryptographic governance standards
Shape the product and application security engineering roadmap through threat modeling and control design
Serve as initial contact for cross-team security engineering projects and align technical outcomes with business requirements
Mentor MSP analysts, junior security engineers, and firmware engineers
Champion TDD, security-by-design, agile practices, and balanced technical debt management
Work with Engineering Managers and the Product & App Security Lead on priorities, roadmap, and resource allocation
Build supervised automations to expand analyst and operator capacity under oversight
Develop operational runbooks, training materials, and knowledge documentation
Participate in operational standups, KPI reporting, quarterly CISO reviews, and Cryptographic Architecture Board meetings

Requirements

What you’ll need

B.S. Degree in Information Security, Cybersecurity, Computer Science, Software Engineering, or related fields
Advanced English level (mandatory)
4–6+ years of relevant hands-on work
Software development proficiency; Python preferred
API integration experience
Infrastructure-as-code experience
CI/CD pipeline development experience
Security engineering depth in detection engineering, SIEM/SOAR platforms, and incident response workflows
MITRE ATT&CK expertise, including TTP mapping, kill chain coverage analysis, detection-to-technique alignment, ATT&CK coverage heatmaps, and TTP coverage gap reporting
MITRE ATLAS expertise in adversarial ML threat modeling
Hands-on AI/agent development experience with agent frameworks, RAG pipelines, or agentic orchestration in production
AI security governance knowledge, including NIST AI RMF, OWASP Top 10 for LLM Applications, and OWASP Top 10 for Agentic AI
AI safety control design, guardrails, human oversight mechanisms, and secure orchestration
Cryptographic and PKI fundamentals, including HSM operations, certificate lifecycle management, code signing pipelines, and PKI concepts
Cross-functional leadership and ability to align technical outcomes with business requirements
Ability to embed with operational and engineering teams, ship in partner-controlled environments, and coach across technical levels
Preferred: HSM platforms such as Entrust nShield or Fortanix DSM
Preferred: PKI and certificate management platforms such as EJBCA/KeyFactor or Venafi
Preferred: Firmware or binary signing, SBOM generation and signing, and attestation workflows
Preferred: Post-quantum cryptography experience with ML-DSA, LMS/LMOD, or hybrid crypto schemes
Preferred: Compliance framework experience with NIST FIPS 140-3, NSA CNSA 2.0+, OCP 2.5/3.0+, ISO 27001, or SOX ITGC
Preferred: Microsoft security stack, including Defender XDR, Microsoft Sentinel, Security Copilot, Logic Apps, KQL, and Azure
Preferred: Splunk, SPL, log forwarding, content/detection management, and index administration
Preferred: Agentic tooling such as MCP, Security Copilot plugins, LangChain, or comparable frameworks
Preferred: Non-human identity and workload identity platforms such as Entra Workload Identities or Okta
Preferred: Prior FDE, solutions-engineering, detection-engineering, or product security engineering role in enterprise manufacturing or hardware product environments

Benefits

Comp & perks

Remote work option
Inclusive, diverse, equitable workplace culture
Opportunities to contribute to innovative products and business value
Mentorship and professional growth opportunities