Security Engineer

About SiFive As the pioneers who introduced RISC-V to the world, SiFive is transforming the future of compute by bringing the limitless potential of RISC-V to the highest performance and most data-intensive applications in the world. SiFive’s unrivaled compute platforms are continuing to enable leading technology companies around the world to innovate, optimize and deliver the most advanced solutions of tomorrow across every market segment of chip design, including artificial intelligence, machine learning, automotive, data center, mobile, and consumer. With SiFive, the future of RISC-V has no limits. At SiFive, we are always excited to connect with talented individuals, who are just as passionate about driving innovation and changing the world as we are.   Our constant innovation and ongoing success is down to our amazing teams of incredibly talented people, who collaborate and support each other to come up with truly groundbreaking ideas and solutions.  Solutions that will have a huge impact on people's lives; making the world a better place, one processor at a time.  Are you ready?   To learn more about SiFive’s phenomenal success and to see why we have won the GSA’s prestigious Most Respected Private Company Award (for the fourth time!), check out our website and Glassdoor pages. Job Description: Responsibilities Create and update network security policies, procedures and technical standards. Implement and automate security controls using infrastructure-as-code and configuration management. Build and maintain log pipelines and detections in Elastic Search (or similar) for infrastructure, authentication, and application security events. Integrate security checks into CI/CD (secret scanning, SAST/DAST hooks, policy-as-code, image scanning). Perform threat modeling for AI-driven systems and workflows explicitly considering risks such as prompt-injection, data exfiltration, and lateral movement via agents. Manage both host and network based DLP policies. Lead and execute ongoing security testing, including log review, vulnerability scans, threat hunting, alert tuning. Review and Implement security tooling as needed utilizing AI models where possible. Server as point of contact for security incident response and continuously improve our detection and response capabilities and process. Assist in the management of SiFive’s network infrastructure (LAN,WAN and WLAN) in co-located data centers , offices  and the public cloud. Identify and deploy tools and systems to ensure network security Create and maintain security standards for LAN, WAN, WLAN and  Cloud network infrastructure. Review and Implement security tooling as needed. Assist in management of SiFive Compliance and Certification efforts. Specifically for ISO 27001 as related to Network Security. Experience and skills required: 7+ years of experience in security engineering or security architecture roles, ideally in an infrastructure-heavy or engineering-centric environment.