Security Engineer

About SiFive

As the pioneers who introduced RISC-V to the world, SiFive is transforming the future of compute by bringing the limitless potential of RISC-V to the highest performance and most data-intensive applications in the world. SiFive’s unrivaled compute platforms are continuing to enable leading technology companies around the world to innovate, optimize and deliver the most advanced solutions of tomorrow across every market segment of chip design, including artificial intelligence, machine learning, automotive, data center, mobile, and consumer. With SiFive, the future of RISC-V has no limits.

At SiFive, we are always excited to connect with talented individuals, who are just as passionate about driving innovation and changing the world as we are.  

Our constant innovation and ongoing success is down to our amazing teams of incredibly talented people, who collaborate and support each other to come up with truly groundbreaking ideas and solutions.  Solutions that will have a huge impact on people's lives; making the world a better place, one processor at a time. 

Are you ready?  

To learn more about SiFive’s phenomenal success and to see why we have won the GSA’s prestigious Most Respected Private Company Award (for the fourth time!), check out our website and Glassdoor pages.

Job Description:

Responsibilities

• Create and update network security policies, procedures and technical standards.

• Implement and automate security controls using infrastructure-as-code and configuration management.

• Build and maintain log pipelines and detections in Elastic Search (or similar) for infrastructure, authentication, and application security events.

• Integrate security checks into CI/CD (secret scanning, SAST/DAST hooks, policy-as-code, image scanning).

• Perform threat modeling for AI-driven systems and workflows explicitly considering risks such as prompt-injection, data exfiltration, and lateral movement via agents.

• Manage both host and network based DLP policies.

• Lead and execute ongoing security testing, including log review, vulnerability scans, threat hunting, alert tuning.

• Review and Implement security tooling as needed utilizing AI models where possible.

• Server as point of contact for security incident response and continuously improve our detection and response capabilities and process.

• Assist in the management of SiFive’s network infrastructure (LAN,WAN and WLAN) in co-located data centers , offices  and the public cloud.

• Identify and deploy tools and systems to ensure network security

• Create and maintain security standards for LAN, WAN, WLAN and  Cloud network infrastructure.

• Review and Implement security tooling as needed.

• Assist in management of SiFive Compliance and Certification efforts. Specifically for ISO 27001 as related to Network Security.

Experience and skills required:

• 7+ years of experience in security engineering or security architecture roles, ideally in an infrastructure-heavy or engineering-centric environment.

• 5+ years of experience managing Zscaler or other SASE solutions

• 5+ years of experience managing switching and routing in a production environment.

• Expert level knowledge of TCP/IP and routing protocols (e.g., EIGRP, OSPF, BGP, IS-IS, vXLAN, MPLS, VLAN, L2).

• Experience working with network equipment providers preferably Juniper, Aruba and PaloAlto Networks.

• Experience identifying and mitigating network security risks including threat modeling or other risk identification techniques.

• Strong problem-solving ability, and desire to implement innovative solutions

• Solid experience in Bash, Python, go or other scripting language

• Proven experience architecting security solutions.

• Proven experience in design and implementation of automation frameworks to speed up network deployments and perform repetitive tasks. 

• Experience with data protection technologies including encryption, key management, data loss prevention, and hardware security modules.

• Solid understanding of Threat prevention, intrusion detection systems

• Experience with industry standard SIEM solutions

• Experience with SASE/CASB/DLP solutions such as ZScaler is desirable

• CISSP, GCIA, CCNP, CCIE, JNCIE, or similar certification is a plus

Additional Information:

This position requires a successful background and reference checks and satisfactory proof of your right to work in:

Any offer of employment for this position is also contingent on the Company verifying that you are a authorized for access to export-controlled technology under applicable export control laws or, if you are not already authorized, our ability to successfully obtain any necessary export license(s) or other approvals.

SiFive is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.