Company Description Join a multibillion-dollar general company that brings together amazing technology, people, and operational scale to become a powerhouse in the memory industry. Headquartered in Rancho Cordova, California, Solidigm combines elements of an established, successful technology company with the spirit, agility, and entrepreneurial mindset of a start-up. the company has international presence in Asia, Europe, and the Americas. Solidigm will continue to lead the world in innovating new Memory technologies with aspirations to be the #1 NAND memory company in the world.

At Solidigm, we are One Team that fosters a diverse, equitable, and inclusive culture that embraces individual uniqueness and empowers us to bring our best selves to deliver excellence in support of Solidigm's vision and mission to be the go-to partner for optimized data storage solutions.

Agentic

Detection & Response Engineering Define and own detection coverage strategy — establish detection standards, naming conventions, and quality criteria for the SOC and Product Security program. Design and govern AI agent identity and delegation — architect the end-to-end lifecycle for non-human identities operating in the security environment, including scoped delegation, audit logging, and kill-switch controls. Apply MITRE ATLAS adversarial ML techniques to threat-model all agent deployments

- Build and maintain automation for signing pipelines, HSM health monitoring, certificate lifecycle management, and access provisioning workflows integrated into CI/CD. Own and evolve the security data platform supporting cryptographic governance: signing telemetry, KPI dashboards, audit logging,



and anomaly detection for signing infrastructure. Architect and govern AI agent integrations within the code signing and cryptographic operations environment — scoped identity, delegation controls, and human-oversight mechanisms for any automation touching signing or key operations. Application & Product Security Integration Embed across firmware engineering, CI/CD, and manufacturing teams — delivering security controls, pipeline integrations, and attestation automation directly in their environments. Integrate security requirements (SAST, SBOM generation and validation, attestation signing, supply-chain controls) across firmware build and release pipelines. Validate security controls through adversary emulation and purple team exercises; close coverage gaps identified through testing and operational feedback.

Technical

Leadership & Expectations Lead security program components and define detection, automation, and cryptographic governance standards — not just execute them. Shape the product and application security engineering roadmap through threat modeling, control design, and input to the Cryptographic Architecture Board and security roadmap. Serve as initial point of contact for cross-team security engineering projects

- Mentor MSP analysts, junior security engineers,



and firmware engineers on agentic patterns, detection best practices, and cryptographic operational hygiene — multiplying team effectiveness. Champion good engineering habits (TDD, security-by-design, tech debt balance, agile) within and beyond the security team; be accountable for high quality in team output. Develop and maintain operational runbooks, training materials, and knowledge documentation to build resilient team capabilities and reduce single-person knowledge concentration risk. Software development proficiency — Python preferred
- Security engineering depth — detection engineering, SIEM/SOAR platforms (Microsoft Sentinel and/or Splunk), and incident response workflows. MITRE ATT&CK; depth — TTP mapping, kill chain coverage analysis, and detection-to-technique alignment
- MITRE ATLAS depth — adversarial ML threat modeling for AI systems and agents, including model evasion, data poisoning, prompt injection, AI supply-chain compromise, and agent-specific attack vectors. AI safety control design including guardrails, human oversight mechanisms, and secure orchestration. Field/embedded delivery mindset — comfortable embedding with operational and engineering teams, shipping in partner-controlled environments, and coaching across technical levels. Post-quantum cryptography (PQC) — practical experience with ML-DSA, LMS/LMOD, or hybrid crypto schemes
- Microsoft security stack — Defender XDR, Microsoft Sentinel (+ Data Lake), Security Copilot, Logic Apps
- Azure. Splunk — SPL, log forwarding, content/detection management, and index administration.

📌 Agentic Security Developer (Tlalnepantla de Baz)
🏢 Solidigm
📍 Tlalnepantla de Baz