Company Description Join a multibillion-dollar general company that brings together amazing technology, people, and operational scale to become a powerhouse in the memory industry.
Headquartered in Rancho Cordova, California, Solidigm combines elements of an established, successful technology company with the spirit, agility, and entrepreneurial mindset of a start-up.
the company has international presence in Asia, Europe, and the Americas.
Solidigm will continue to lead the world in innovating new Memory technologies with aspirations to be the #1 NAND memory company in the world.
At Solidigm, we are One Team that fosters a diverse, equitable, and inclusive culture that embraces individual uniqueness and empowers us to bring our best selves to deliver excellence in support of Solidigm's vision and mission to be the go-to partner for optimized data storage solutions.
The Agentic SOC Developer is Solidigm's embedded security builder — a Senior Engineer (IC7) who owns detection coverage strategy, builds and ships production agentic detection and response, and directly expands the capability of the SOC and managed-services partner.
Define and own detection coverage strategy — establish and maintain detection standards, naming conventions, and quality criteria for the SOC.
Design and govern AI agent identity and delegation — architect the end-to-end lifecycle for non-human identities operating in the security environment — scoped delegation, audit logging, and kill-switch controls.
Own guardrails, safety controls, and human-oversight mechanisms for production security AI agents; apply MITRE ATLAS adversarial ML techniques to threat-model agent deployments.
Architect and evolve the security data platform — own collector/forwarder architecture, log pipeline design, SIEM strategy,



and detection-content portability that enable an adaptive, resilient SOC.
Contribute to the technical roadmap for security data infrastructure.
close coverage gaps identified through testing and operational feedback.
All detection work is grounded in MITRE ATT&CK; (TTP mapping, kill chain coverage, gap analysis).
Degree in Information Security, Cybersecurity, Computer Science, Software Engineering, or related fields.
Advanced English level (mandatory).
Software development proficiency — Python preferred; Security operations fluency — detection engineering, SIEM/SOAR platforms, and incident response workflows.
MITRE ATT&CK; depth — TTP mapping, kill chain coverage analysis, and detection-to-technique alignment.
MITRE ATLAS depth — adversarial ML threat modeling for AI systems and agents — mapping attack techniques such as model evasion, data poisoning, prompt injection, AI supply-chain compromise, and agent-specific vectors (e.g., Ability to apply ATLAS to threat-model security AI agent deployments and validate guardrails against the framework's technique catalog.
OWASP Top 10 for LLM Applications (LLM01–LLM10: prompt injection, insecure output handling, training data poisoning, model denial of service, supply chain vulnerabilities, etc.); and AI safety control design including guardrails, human oversight mechanisms, and secure orchestration.
Field mindset — comfortable embedding with operational teams, shipping in partner-controlled environments, and coaching across technical levels.
Microsoft security stack — Defender XDR, Microsoft Sentinel (+ Data Lake), Security Copilot, Logic Apps; Azure.
Splunk — SPL, log forwarding, content/detection management, and index administration.
SIEM migration & content portability — platform-to-platform detection migration, collector/forwarder architecture at scale.

📌 Senior Security Engineer I (Jalisco)
🏢 Solidigm
📍 Jalisco