Director, Security Engineering & Vulnerability Management

About SiTime

SiTime is the Precision Timing company.

Timing is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.

Our semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com.

Job Summary

Reporting to the Chief Information Security Officer, this leader will own security engineering and vulnerability management across SiTime's corporate, infrastructure, and lab environments, protecting the company's intellectual property, operations, and customer commitments as SiTime scales. It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening baselines that everything else depends on. The role combines strategy with execution: setting direction, selecting, deploying, operating, and maintaining security tools, and leading a blended team of employees and contractors to measurable risk reduction.

Security Engineering

• Own SiTime’s security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls, across selection, architecture, deployment, configuration, integration, upgrades, and lifecycle management.
• Operate and mature the existing stack, moving tools from deployment into steady-state operation with Security Operations, and own configuration health, alert quality, and control effectiveness measurement for every platform.
• Drive coverage to a defined standard and prove it with evidence rather than assumption, so there are no unmanaged endpoints, servers, cloud workloads, or lab systems.
• Define security configuration standards for endpoints, servers, and infrastructure, plus security requirements for enterprise platforms owned by IT Engineering. Drive adoption with IT and validate that implementations meet those requirements.
• Protect lab and engineering environments, including network segmentation and compensating controls for systems that can’t be patched or run standard agents.
• Build and maintain integrations and automation between security tooling, IT service management, identity, and the SIEM, so detection and response teams get the visibility, signal, and context they need without manual effort.
• Lead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.

Vulnerability management

• Build and run an enterprise vulnerability management program across endpoints, servers, network devices, lab systems, and cloud assets
• Establish accurate asset inventory and scanning coverage as the foundation of the program
• Prioritize remediation by exploitability, exposure, and business criticality, with a focus on design IP and critical operations
• Set remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations
• Respond quickly to critical and actively exploited vulnerabilities

Leadership and reporting

• Lead and develop a team of security engineers and contractors; hire as the function grows
• Partner closely with IT, engineering, and lab operations
• Define and report metrics to the CISO and leadership, such as asset and control coverage, critical vulnerability aging, and remediation timeliness
• Manage security vendors and service providers, including budget and contract decisions

Qualifications & Requirements: 

• 10+ years in information security, including experience leading security engineering programs and teams
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field - or equivalent practical experience.
• Experience building and operating risk-based vulnerability management programs
• Experience deploying and managing enterprise security tools and controls
• Working knowledge of endpoint security, secure configuration, network segmentation, and identity and access controls
• Ability to translate technical risk into clear priorities and executive reporting
• Strong partnership skills with IT, engineering, and business teams
• Experience with security integration during acquisitions
• Familiarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and SOX IT controls
• At least one of the following certifications: CISSP, CISA, CCSK, OSCP
• People leadership or technical lead experience.

Preferred:

• Experience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.
• Hands-on experience with industry leading security monitoring and detection tool stack
• Experience securing laboratory, test and engineering networks, including segmentation and egress control.
• Experience with hardware root of trust, secure boot or device attestation.
• Experience deploying Microsoft Purview classification and data loss prevention at scale.

Desired Characteristics & Attributes:

• Engineering rigor and a finisher's instinct: takes deployments to full coverage and steady-state operation rather than leaving them at pilot.
• Comfortable owning the documentation, runbooks, upgrades and configuration drift.
• Program management rigor, with the ability to run multiple concurrent cross-functional initiatives to completion

Compensation Range: 

At SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.

In addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals-reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company’s future growth and success.

Benefits offered: 401k plan, health and wellness that includes medical, dental, vision, life, parental leave, legal services, and time off plans.

SiTime is an Equal Opportunity Employer. We treat each person fairly and we do not tolerate discrimination or harassment against anyone on the basis of any protected characteristics, including race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, pregnancy, political affiliation, protected veteran status, protected genetic information, or marital status or other characteristics protected by law. SiTime participates in the E-Verify  program.

Learn More about SiTime:  Review the Get to Know SiTime  section of our career page to explore our culture, values, and what makes us unique. 

• Innovation on Top - Philosophies of Innovation with Rajesh Vashist
• Fabrication Knowledge - An Interview with Rajesh Vashist
• SiTime Corporation - YouTube

Pay Range

$179,256—$256,370 USD