{"id":3481313,"url":"https://alion.io/job/sitime-director-security-engineering-vulnerability-management","title":"Director, Security Engineering & Vulnerability Management","company":{"id":58930,"name":"SiTime","domain":"sitime.com","url":"https://alion.io/company/sitime","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Santa Clara, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":179256,"max":256370,"currency":"USD","period":"year","gross":null,"usd_annual":256370},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-16T01:20:50Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-31T13:43:59Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"About SiTime\nSiTime is the Precision Timing company.\nTiming is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.\nOur semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com.\nJob Summary\nReporting to the Chief Information Security Officer, this leader will own security engineering and vulnerability management across SiTime's corporate, infrastructure, and lab environments, protecting the company's intellectual property, operations, and customer commitments as SiTime scales. It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening baselines that everything else depends on. The role combines strategy with execution: setting direction, selecting, deploying, operating, and maintaining security tools, and leading a blended team of employees and contractors to measurable risk reduction.\nSecurity Engineering\nOwn SiTime’s security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls, across selection, architecture, deployment, configuration, integration, upgrades, and lifecycle management.\nOperate and mature the existing stack, moving tools from deployment into steady-state operation with Security Operations, and own configuration health, alert quality, and control effectiveness measurement for every platform.\nDrive coverage to a defined standard and prove it with evidence rather than assumption, so there are no unmanaged endpoints, servers, cloud workloads, or lab systems.\nDefine security configuration standards for endpoints, servers, and infrastructure, plus security requirements for enterprise platforms owned by IT Engineering. Drive adoption with IT and validate that implementations meet those requirements.\nProtect lab and engineering environments, including network segmentation and compensating controls for systems that can’t be patched or run standard agents.\nBuild and maintain integrations and automation between security tooling, IT service management, identity, and the SIEM, so detection and response teams get the visibility, signal, and context they need without manual effort.\nLead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.\nVulnerability management\nBuild and run an enterprise vulnerability management program across endpoints, servers, network devices, lab systems, and cloud assets\nEstablish accurate asset inventory and scanning coverage as the foundation of the program\nPrioritize remediation by exploitability, exposure, and business criticality, with a focus on design IP and critical operations\nSet remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations\nRespond quickly to critical and actively exploited vulnerabilities\nLeadership and reporting\nLead and develop a team of security engineers and contractors; hire as the function grows\nPartner closely with IT, engineering, and lab operations\nDefine and report metrics to the CISO and leadership, such as asset and control coverage, critical vulnerability aging, and remediation timeliness\nManage security vendors and service providers, including budget and contract decisions\nQualifications & Requirements: \n10+ years in information security, including experience leading security engineering programs and teams\nBachelor's degree in Computer Science, Information Security, Engineering, or a related technical field - or equivalent practical experience.\nExperience building and operating risk-based vulnerability management programs\nExperience deploying and managing enterprise security tools and controls\nWorking knowledge of endpoint security, secure configuration, network segmentation, and identity and access controls\nAbility to translate technical risk into clear priorities and executive reporting\nStrong partnership skills with IT, engineering, and business teams\nExperience with security integration during acquisitions\nFamiliarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and SOX IT controls\nAt least one of the following certifications: CISSP, CISA, CCSK, OSCP\nPeople leadership or technical lead experience.\nPreferred:\nExperience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.\nHands-on experience with industry leading security monitoring and detection tool stack\nExperience securing laboratory, test and engineering networks, including segmentation and egress control.\nExperience with hardware root of trust, secure boot or device attestation.\nExperience deploying Microsoft Purview classification and data loss prevention at scale.\nDesired Characteristics & Attributes:\nEngineering rigor and a finisher's instinct: takes deployments to full coverage and steady-state operation rather than leaving them at pilot.\nComfortable owning the documentation, runbooks, upgrades and configuration drift.\nProgram management rigor, with the ability to run multiple concurrent cross-functional initiatives to completion\nCompensation Range: \nAt SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.\nIn addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals-reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company’s future growth and success.\nBenefits offered: 401k plan, health and wellness that includes medical, dental, vision, life, parental leave, legal services, and time off plans.\nSiTime is an Equal Opportunity Employer. We treat each person fairly and we do not tolerate discrimination or harassment against anyone on the basis of any protected characteristics, including race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, pregnancy, political affiliation, protected veteran status, protected genetic information, or marital status or other characteristics protected by law. SiTime participates in the E-Verify program.\nLearn More about SiTime: Review the Get to Know SiTime section of our career page to explore our culture, values, and what makes us unique. \nInnovation on Top - Philosophies of Innovation with Rajesh Vashist\nFabrication Knowledge - An Interview with Rajesh Vashist\n SiTime Corporation - YouTube\nPay Range\n$179,256—$256,370 USD","description_format":"text","description_chars":7255,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-10-29T20:14:17Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 19 · green card filings: 3","filings_12m":19,"filings_prev_12m":10,"green_card_filings_12m":3,"median_offered_wage_usd":140455,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.847,"p_room":0.9,"age_days":15,"expected_fill_days":28,"reasons":["conf:3","velocity","win:mid","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":256370,"is_top_pay":true},"html_url":"https://alion.io/job/sitime-director-security-engineering-vulnerability-management","json_url":"https://alion.io/job/sitime-director-security-engineering-vulnerability-management.json","meta":{"generated_at":"2026-10-31T15:24:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24065,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58930},"rest":"https://alion.io/mcp/rest/get_company?id=58930"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsitime-director-security-engineering-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsitime-director-security-engineering-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsitime-director-security-engineering-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sitime-director-security-engineering-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsitime-director-security-engineering-vulnerability-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3481313}},{"tool":"search_jobs","arguments":{"company":"sitime.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3481313},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}