Security Engineer

Job Description:

Responsibilities

• Create and update network security policies, procedures and technical standards.
• Implement and automate security controls using infrastructure-as-code and configuration management.
• Build and maintain log pipelines and detections in Elastic Search (or similar) for infrastructure, authentication, and application security events.
• Integrate security checks into CI/CD (secret scanning, SAST/DAST hooks, policy-as-code, image scanning).
• Perform threat modeling for AI-driven systems and workflows explicitly considering risks such as prompt-injection, data exfiltration, and lateral movement via agents.
• Manage both host and network based DLP policies.
• Lead and execute ongoing security testing, including log review, vulnerability scans, threat hunting, alert tuning.
• Review and Implement security tooling as needed utilizing AI models where possible.
• Server as point of contact for security incident response and continuously improve our detection and response capabilities and process.
• Assist in the management of SiFive’s network infrastructure (LAN,WAN and WLAN) in co-located data centers , offices  and the public cloud.
• Identify and deploy tools and systems to ensure network security
• Create and maintain security standards for LAN, WAN, WLAN and  Cloud network infrastructure.
• Review and Implement security tooling as needed.
• Assist in management of SiFive Compliance and Certification efforts. Specifically for ISO 27001 as related to Network Security.

Experience and skills required:

• 7+ years of experience in security engineering or security architecture roles, ideally in an infrastructure-heavy or engineering-centric environment.
• 5+ years of experience managing Zscaler or other SASE solutions
• 5+ years of experience managing switching and routing in a production environment.
• Expert level knowledge of TCP/IP and routing protocols (e.g., EIGRP, OSPF, BGP, IS-IS, vXLAN, MPLS, VLAN, L2).
• Experience working with network equipment providers preferably Juniper, Aruba and PaloAlto Networks.
• Experience identifying and mitigating network security risks including threat modeling or other risk identification techniques.
• Strong problem-solving ability, and desire to implement innovative solutions
• Solid experience in Bash, Python, go or other scripting language
• Proven experience architecting security solutions.
• Proven experience in design and implementation of automation frameworks to speed up network deployments and perform repetitive tasks. 
• Experience with data protection technologies including encryption, key management, data loss prevention, and hardware security modules.
• Solid understanding of Threat prevention, intrusion detection systems
• Experience with industry standard SIEM solutions
• Experience with SASE/CASB/DLP solutions such as ZScaler is desirable
• CISSP, GCIA, CCNP, CCIE, JNCIE, or similar certification is a plus