Security Engineer

Responsibilities

• Create and update network security policies, procedures and technical standards.
• Implement and automate security controls using infrastructure-as-code and configuration management.
• Build and maintain log pipelines and detections in Elastic Search (or similar) for infrastructure, authentication, and application security events.
• Integrate security checks into CI/CD (secret scanning, SAST/DAST hooks, policy-as-code, image scanning).
• Perform threat modeling for AI-driven systems and workflows explicitly considering risks such as prompt-injection, data exfiltration, and lateral movement via agents.
• Manage both host and network based DLP policies.
• Lead and execute ongoing security testing, including log review, vulnerability scans, threat hunting, alert tuning.
• Review and Implement security tooling as needed utilizing AI models where possible.
• Server as point of contact for security incident response and continuously improve our detection and response capabilities and process.
• Assist in the management of SiFive’s network infrastructure (LAN,WAN and WLAN) in co-located data centers , offices  and the public cloud.
• Identify and deploy tools and systems to ensure network security
• Create and maintain security standards for LAN, WAN, WLAN and  Cloud network infrastructure.
• Review and Implement security tooling as needed.
• Assist in management of SiFive Compliance and Certification efforts. Specifically for ISO 27001 as related to Network Security.

Experience and skills required:

…