SiTime

Fabless MEMS timing solutions provider

Director – Security Engineering & Vulnerability Management

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeIn-person

About the Job

Requirements

At least 10 years of information security experience, including leading security engineering programs and teams.
A bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
Experience building and operating risk-based vulnerability management programs.
Experience deploying and managing enterprise security tools and controls.
Working knowledge of endpoint security, secure configuration, network segmentation, and identity and access controls.
Ability to translate technical risk into clear priorities and executive reporting.
Experience integrating security during acquisitions.
Familiarity with NIST Cybersecurity Framework, NIST Special Publication 800-53, CIS Controls, ISO 27001, and SOX IT controls.
At least one of the following certifications: CISSP, CISA, CCSK, or OSCP.
People leadership or technical lead experience.

Responsibilities

Own security engineering and vulnerability management across corporate, infrastructure, and lab environments, protecting intellectual property, operations, and customer commitments.
Own endpoint and network detection platforms, data protection and classification, privileged access, the AISPM platform, cloud and SaaS posture, SIEM, and hardening baselines.
Set direction for security tools and select, deploy, operate, and maintain them while leading a blended team of employees and contractors toward measurable risk reduction.
Own the security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls across selection, architecture, deployment, configuration, integration, upgrades, and lifecycle management.
Operate and mature the existing security stack, moving tools into steady-state operation with Security Operations, and own configuration health, alert quality, and control effectiveness measurement for every platform.
Drive security coverage to a defined standard and establish evidence that there are no unmanaged endpoints, servers, cloud workloads, or lab systems.
Define security configuration standards for endpoints, servers, and infrastructure, and security requirements for enterprise platforms owned by IT Engineering; drive adoption with IT and validate implementations.
Protect lab and engineering environments through network segmentation and compensating controls for systems that cannot be patched or run standard agents.
Build and maintain integrations and automation between security tooling, IT service management, identity, and the SIEM to provide detection and response teams with visibility, signal, and context without manual effort.
Lead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.
Build and run an enterprise vulnerability management program across endpoints, servers, network devices, lab systems, and cloud assets.
Establish accurate asset inventory and scanning coverage as the foundation of the vulnerability management program.
Prioritize remediation by exploitability, exposure, and business criticality, focusing on design intellectual property and critical operations.
Set remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations.
Respond quickly to critical and actively exploited vulnerabilities.
Lead and develop a team of security engineers and contractors, and hire as the function grows.
Partner closely with IT, engineering, and lab operations.
Define and report metrics to the CISO and leadership, including asset and control coverage, critical vulnerability aging, and remediation timeliness.
Manage security vendors and service providers, including budget and contract decisions.

Desired Qualifications

Experience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.
Hands-on experience with industry-leading security monitoring and detection tool stacks.
Experience securing laboratory, test, and engineering networks, including segmentation and egress control.
Experience with hardware root of trust, secure boot, or device attestation.
Experience deploying Microsoft Purview classification and data loss prevention at scale.
Engineering rigor and a finisher's instinct, taking deployments to full coverage and steady-state operation rather than leaving them at pilot.
Comfort owning documentation, runbooks, upgrades, and configuration drift.
Program management rigor and the ability to run multiple concurrent cross-functional initiatives to completion.

About SiTime

SiTime is the Precision Timing company.

Timing is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.

Our semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com.

Job Summary

Reporting to the Chief Information Security Officer, this leader will own security engineering and vulnerability management across SiTime's corporate, infrastructure, and lab environments, protecting the company's intellectual property, operations, and customer commitments as SiTime scales. It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening baselines that everything else depends on. The role combines strategy with execution: setting direction, selecting, deploying, operating, and maintaining security tools, and leading a blended team of employees and contractors to measurable risk reduction.

Security Engineering

Own SiTime’s security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls, across selection, architecture, deployment, configuration, integration, upgrades, and lifecycle management.
Operate and mature the existing stack, moving tools from deployment into steady-state operation with Security Operations, and own configuration health, alert quality, and control effectiveness measurement for every platform.
Drive coverage to a defined standard and prove it with evidence rather than assumption, so there are no unmanaged endpoints, servers, cloud workloads, or lab systems.
Define security configuration standards for endpoints, servers, and infrastructure, plus security requirements for enterprise platforms owned by IT Engineering. Drive adoption with IT and validate that implementations meet those requirements.
Protect lab and engineering environments, including network segmentation and compensating controls for systems that can’t be patched or run standard agents.
Build and maintain integrations and automation between security tooling, IT service management, identity, and the SIEM, so detection and response teams get the visibility, signal, and context they need without manual effort.
Lead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.

Vulnerability management

Build and run an enterprise vulnerability management program across endpoints, servers, network devices, lab systems, and cloud assets
Establish accurate asset inventory and scanning coverage as the foundation of the program
Prioritize remediation by exploitability, exposure, and business criticality, with a focus on design IP and critical operations
Set remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations
Respond quickly to critical and actively exploited vulnerabilities

Leadership and reporting

Lead and develop a team of security engineers and contractors; hire as the function grows
Partner closely with IT, engineering, and lab operations
Define and report metrics to the CISO and leadership, such as asset and control coverage, critical vulnerability aging, and remediation timeliness
Manage security vendors and service providers, including budget and contract decisions

Qualifications & Requirements:

10+ years in information security, including experience leading security engineering programs and teams
Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field — or equivalent practical experience.
Experience building and operating risk-based vulnerability management programs
Experience deploying and managing enterprise security tools and controls
Working knowledge of endpoint security, secure configuration, network segmentation, and identity and access controls
Ability to translate technical risk into clear priorities and executive reporting
Strong partnership skills with IT, engineering, and business teams
Experience with security integration during acquisitions
Familiarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and SOX IT controls
At least one of the following certifications: CISSP, CISA, CCSK, OSCP
People leadership or technical lead experience.

Preferred:

Experience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.
Hands-on experience with industry leading security monitoring and detection tool stack
Experience securing laboratory, test and engineering networks, including segmentation and egress control.
Experience with hardware root of trust, secure boot or device attestation.
Experience deploying Microsoft Purview classification and data loss prevention at scale.

Desired Characteristics & Attributes:

Engineering rigor and a finisher's instinct: takes deployments to full coverage and steady-state operation rather than leaving them at pilot.
Comfortable owning the documentation, runbooks, upgrades and configuration drift.
Program management rigor, with the ability to run multiple concurrent cross-functional initiatives to completion

Compensation Range:

At SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.

In addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals—reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company’s future growth and success.

Benefits offered: 401k plan, health and wellness that includes medical, dental, vision, life, parental leave, legal services, and time off plans.

SiTime is an Equal Opportunity Employer. We treat each person fairly and we do not tolerate discrimination or harassment against anyone on the basis of any protected characteristics, including race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, pregnancy, political affiliation, protected veteran status, protected genetic information, or marital status or other characteristics protected by law. SiTime participates in the E-Verify program.

Learn More about SiTime: Review the Get to Know SiTime section of our career page to explore our culture, values, and what makes us unique.

Pay Range

$179,256—$256,370 USD

Pay Range 179256 - 256370 USD

About the Company

SiTime

Fabless MEMS timing solutions provider

SiTime designs MEMS-based timing solutions (oscillators, network synchronizers, and jitter cleaners) as a fabless semiconductor company. MEMS resonators on silicon replace quartz to generate precise clocks and synchronize networks, with manufacturing handled by third-party foundries. The approach offers smaller size, lower power consumption, and better temperature stability, supported by scalable, design-focused development rather than in-house fabrication. Its goal is to expand MEMS timing adoption across automotive, industrial, IoT, mobile, aerospace, and telecom markets worldwide.

Company size: 501-1,000
Company stage: IPO
Headquarters: Santa Clara, CA
Founded: 2005

Recently Posted Jobs

Explore more opportunities at SiTime

See more jobs