{"id":3481352,"url":"https://alion.io/job/sitime-manager-offensive-security","title":"Manager, Offensive Security","company":{"id":58930,"name":"SiTime","domain":"sitime.com","url":"https://alion.io/company/sitime","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Hardware","role_family":"Hardware","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":46000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":18},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-10-16T01:59:48Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-31T10:01:40Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"About SiTime\nSiTime is the Precision Timing company.\nTiming is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.\nOur semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com.\nJob Summary\nReporting to the Head of Security Assurance, one of three functions in SiTime's Security Organization under the CISO, this role leads SiTime's Offensive Security function. It owns penetration testing, red and purple team exercises, vulnerability disclosure and bug bounty, and validation that the controls SiTime has bought and built actually work.\nThis is a build role. The candidate will design a recurring testing program that covers the enterprise, cloud, SaaS, application and laboratory estates, establish adversary simulation against realistic objectives, and create the feedback loop that turns findings into improved detection and hardening rather than a report that is filed away.\nIt is also a people-leadership role. The candidate starts hands-on, personally running the first cycle of testing, then scales through a mix of full-time testers and specialist firms engaged where independence or niche capability is required.\nThis is an accountable owner role, not an advisory one. Findings are owned through to verified closure in partnership with IT, Engineering, and its peers in Security Assurance, and with the Security Organization's other two functions:\nSecurity Operations, whose detections this team validates through purple team exercises.\nSecurity Architecture, whose target state and control baselines this team tests against.\nWe value diverse experiences, perspectives, and career paths, and welcome candidates who are excited to contribute to our mission.\nResponsibilities:\nOffensive Testing Program\nRun a recurring penetration testing program across enterprise, cloud, SaaS, application, network and laboratory environments, covering both grey box and black box engagements.\nScope, plan and execute internal testing, and manage external testing firms where specialist capability or independence is required.\nPrioritize testing around the paths that reach design data, source code repositories, laboratory and test networks, and partner and OSAT connectivity.\nOwn the finding lifecycle end to end: severity, named owner, remediation service level, retest and closure with evidence.\nMove the program from point-in-time assessment toward continuous validation of the controls that matter most.\nRed Team, Purple Team and Detection Validation\nDesign and run threat-informed red team exercises against realistic objectives, with clear rules of engagement and authorization.\nRun purple team exercises jointly with Security Operations to validate and improve detection coverage, mapping results to MITRE ATT&CK.\nValidate that deployed controls detect and prevent, and route the gaps to Security Engineering and Security Operations with reproducible evidence.\nSimulate insider and data exfiltration scenarios to test data loss prevention, access controls and monitoring on the design environment.\nContribute technical injections and scenarios to ransomware and crisis tabletop exercises.\nTrack adversary tradecraft relevant to semiconductors, hardware and intellectual property theft, including state-linked activity, and translate it into test scenarios.\nDisclosure, Bug Bounty and Program Scaling\nStand up and run vulnerability disclosure and bug bounty programs, including scope definition, triage, reward policy and researcher relations.\nDefine the rules, authorization and safety controls that keep offensive activity inside agreed boundaries and out of production impact.\nBuild the internal testing capability over time, and manage the specialist firms that supplement it.\nSupport customer-facing security assurance by providing independent evidence of testing coverage and remediation.\nFeed recurring themes back into the security roadmap, architecture standards and awareness content.\nQualifications & Requirements : \n6+ years in offensive security, penetration testing or red teaming, including 2+ years leading a program or a team.\nBachelor's degree in Computer Science, Information Security, Engineering, or a related technical field - or equivalent practical experience.\nAt least one of the following certifications: OSCP, OSEP, OSCE, , or equivalent.\nDemonstrated hands-on exploitation capability across network, cloud, application, identity and endpoint.\nExperience designing and running red and purple team exercises and mapping coverage to MITRE ATT&CK.\nExperience managing external testing vendors and running a vulnerability disclosure or bug bounty program.\nAbility to write findings that engineers can act on and executives can understand.\nPeople leadership or technical lead experience.\nEnglish proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment.\nPreferred:\nExperience in a semiconductor, hardware, embedded or OT-adjacent environment.\nHardware and firmware testing experience, including secure boot and debug interface exposure.\nCloud exploitation and identity attack path analysis in Azure and AWS.\nSource code review and application security testing capability.\nExperience testing engineering, design or laboratory environments without disrupting them.\nDesired Characteristics & Attributes:\nStrong ethics and judgment: operates within authorization, documents everything, and knows when to stop.\nEvidence-driven and measured on risk reduced and detections improved\nConstructive with the teams being tested; builds partnership rather than an adversarial dynamic.\nAble to work effectively with a U.S.-based security leaders, peers and US stakeholders across time zones.\nCompensation Range: \nAt SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.\nIn addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals-reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company’s future growth and success.\nSiTime is committed to providing equal employment opportunities to all employees and applicants. Employment decisions are based on qualifications, merit, and business needs. We do not discriminate on the basis of any characteristic protected by applicable law.\nLearn More about SiTime: Review the Get to Know SiTime section of our career page to explore our culture, values, and what makes us unique. \nInnovation on Top - Philosophies of Innovation with Rajesh Vashist\nFabrication Knowledge - An Interview with Rajesh Vashist\n SiTime Corporation - YouTube","description_format":"text","description_chars":7418,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Passive Components & Connectors","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-10-29T20:14:17Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.9,"age_days":15,"expected_fill_days":28,"reasons":["conf:3","velocity","win:mid","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/sitime-manager-offensive-security","json_url":"https://alion.io/job/sitime-manager-offensive-security.json","meta":{"generated_at":"2026-10-31T13:42:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21271,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58930},"rest":"https://alion.io/mcp/rest/get_company?id=58930"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsitime-manager-offensive-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsitime-manager-offensive-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsitime-manager-offensive-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sitime-manager-offensive-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsitime-manager-offensive-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3481352}},{"tool":"search_jobs","arguments":{"company":"sitime.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3481352},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}