{"id":3481438,"url":"https://alion.io/job/sitime-sr-manager-security-operations","title":"Sr. Manager, Security Operations","company":{"id":58930,"name":"SiTime","domain":"sitime.com","url":"https://alion.io/company/sitime","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Santa Clara, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":154710,"max":221230,"currency":"USD","period":"year","gross":null,"usd_annual":221230},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Darktrace","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-16T01:05:04Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-11-01T23:17:18Z","board_verified":true,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"About SiTime\nSiTime is the Precision Timing company.\nTiming is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.\nOur semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com.\nJob Summary\nReporting to the CISO, this role leads Security Operations, one of three functions in SiTime's Security Organization. It owns detection and monitoring, the 24x7 managed detection and response relationship, threat hunting, incident response and ransomware readiness - the detect and respond function of the security organization.\nThis is a build role. The candidate will mature and scale the SIEM and log coverage standard, select and operate the MDR partner, establish detection use cases for the threats that matter to a fabless semiconductor company, and take the incident response and ransomware playbooks from draft to rehearsed.\nDetection and response are only as strong as the platforms and data beneath them. The role partners closely with Security Engineering and Vulnerability Management to build SiTime's detection and response platform capabilities, and to enrich log data with the context detections depend on, such as asset criticality, owner, identity, and vulnerability exposure, so that detection coverage is comprehensive and every alert can be acted on quickly.\nIt is also a people-leadership role. The candidate starts hands-on, then scales the function through a mix of full-time hires, managed service capacity and specialist contractors engaged for surge and testing cycles.\nThis is an accountable owner role, not an advisory one. The role's core responsibility is to detect, triage, contain, and recover from security threats before they cause material harm to SiTime, and to keep the company ready to respond at any hour. The role partners with IT, Engineering, Legal, and the business, and with the Security Organization's other two functions:\nSecurity Assurance, whose Security Engineering team deploys and maintains the sensors and platforms this team monitors, whose Vulnerability Management team coordinates the response to critical vulnerabilities and zero-days, and whose Offensive Security team validates detections through purple team exercises.\nSecurity Architecture, which sets the logging, monitoring, and data protection architecture that detection coverage is built on.\nWe value diverse experiences, perspectives, and career paths, and welcome candidates who are excited to contribute to our mission.\nResponsibilities:\nDetection and Monitoring - SIEM, MDR and Telemetry Coverage\nOwn SEIM end to end: design, deployment, priority log onboarding, detection content, tuning, and ongoing cost management.\nOwn and enforce a log coverage standard spanning cloud, SaaS, endpoint, network, application and laboratory environments, and close the gaps where coverage does not exist today.\nManage the 24x7 MDR provider. Own the service levels, the escalation path into SiTime, the quality review cycle and the operating rhythm.\nBuild detection use cases aligned to the threats that matter to a fabless semiconductor company, including unauthorized access to and bulk movement of design data and source code.\nEstablish alert triage, case management and hand-off workflow between the MDR provider and SiTime Security; measure and drive down time to acknowledge and time to contain.\nSet log retention standards sufficient to support forensic investigation, legal hold and customer or regulatory inquiry.\nPartner with Security Engineering on the coverage, configuration health and alert quality of CrowdStrike, Darktrace, Microsoft Defender and future sensors.\nThreat Hunting, Intelligence and Detection Improvement\nRun a threat hunting program, directly and through the MDR provider, focused on the adversary tradecraft used against semiconductor, hardware and intellectual property targets.\nTrack threat intelligence relevant to SiTime, including state-linked activity, and turn it into detection content and hunting hypotheses.\nMap detection coverage to MITRE ATT&CK, and to MITRE ATLAS for AI systems and agents, and close the highest-risk gaps first.\nParticipate in purple team exercises with Offensive Security, and convert every missed technique into a tested detection.\nProvide exploitation and threat signal to Vulnerability Management, and partner on the vulnerability response playbook and tabletop exercises for critical vulnerabilities and zero-days.\nProduce detection and response metrics that demonstrate risk reduction rather than alert volume.\nVulnerability Management - Risk-Based Operations\nDesign and operate a risk-based vulnerability management program across endpoints, servers, cloud workloads, SaaS, network devices and laboratory systems.\nDefine remediation service levels by severity and asset criticality, and drive closure with IT, Engineering and system owners rather than reporting on open counts.\nOwn attack surface and external exposure monitoring of internet-facing assets, and reduce the exposed footprint over time.\nOperate exception handling with risk-based approval, compensating controls and time-boxed expiry, in partnership with the Security Risk, Assurance and Trust function.\nProduce vulnerability, coverage and aging metrics that demonstrate risk reduction rather than scan activity.\nFeed vulnerability and exposure signal into the enterprise risk register so it shapes company-wide prioritization.\nIncident Response and Ransomware Readiness\nOwn the incident response and ransomware playbooks, and keep them approved, socialized and exercised.\nDeploy and operate paging, the on-call rotation and escalation, and make sure a real person is reachable at any hour.\nManage the external incident response and digital forensics retainer, and keep the partner current on the SiTime environment.\nPlan and run ransomware and crisis tabletop exercises for both executive and technical audiences, and track every resulting action to closure with evidence.\nAct as incident commander for security incidents: run the bridge, set the status cadence, and produce the executive reporting.\nPartner with Legal, Communications, Finance and Insurance on notification obligations, crisis communications and claims.\nRun post-incident reviews and feed the findings back into detection content, controls and the security roadmap.\nQualifications & Requirements: \n8+ years in security operations, detection and response, or vulnerability management, including 3+ years building or substantially rebuilding a function.\nBachelor's degree in Computer Science, Information Security, Engineering, or a related technical field - or equivalent practical experience.\nAt least one of the following certifications: CISSP, GCIA, GCIH, GCFA, or equivalent.\nPeople leadership experience.\nHands-on experience deploying and operating a modern SIEM, Microsoft Sentinel strongly preferred, including log onboarding, detection engineering and cost control.\nExperience managing an MDR or MSSP relationship, including service level definition, escalation design and quality review.\nDemonstrated ownership of a risk-based vulnerability management program with enforced remediation service levels.\nExperience leading security incidents end to end, including ransomware scenarios, and designing and running tabletop exercises.\nExperience running threat hunting and mapping detection coverage to MITRE ATT&CK and ATLAS.\nTechnical fluency across cloud platforms (Azure, AWS), endpoint, network and identity telemetry.\nEnglish proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment.\nPreferred:\nExperience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.\nHands-on experience with industry leading security tools and scanner\nExperience monitoring engineering, design and laboratory environments, including intellectual property exfiltration scenarios.\nDesired Characteristics & Attributes:\nStrong executive presence and stakeholder management: able to translate complex technical security concepts into business-friendly, risk-oriented language and influence decision-making across functions without direct authority.\nProgram management rigor with ablity to run multiple concurrent cross-functional initiatives to completion, not just track them.\nCompensation: \nAt SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.\nIn addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals-reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company’s future growth and success.\nBenefits offered: 401k plan, health and wellness that includes medical, dental, vision, life, parental leave, legal services, and time off plans.\nSiTime is an Equal Opportunity Employer. We treat each person fairly and we do not tolerate discrimination or harassment against anyone on the basis of any protected characteristics, including race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, pregnancy, political affiliation, protected veteran status, protected genetic information, or marital status or other characteristics protected by law. SiTime participates in the E-Verify program.\nLearn More about SiTime: Review the Get to Know SiTime section of our career page to explore our culture, values, and what makes us unique. \nInnovation on Top - Philosophies of Innovation with Rajesh Vashist\nFabrication Knowledge - An Interview with Rajesh Vashist\n SiTime Corporation - YouTube\nPay Range\n$154,710—$221,230 USD","description_format":"text","description_chars":10468,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["401k plan","Equity","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Passive Components & Connectors","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-10-29T20:14:17Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 19 · green card filings: 3","filings_12m":19,"filings_prev_12m":10,"green_card_filings_12m":3,"median_offered_wage_usd":140455,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":78,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.867,"p_room":0.9,"age_days":16,"expected_fill_days":29,"reasons":["conf:2","velocity","win:mid","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":221230,"is_top_pay":true},"html_url":"https://alion.io/job/sitime-sr-manager-security-operations","json_url":"https://alion.io/job/sitime-sr-manager-security-operations.json","meta":{"generated_at":"2026-11-02T02:35:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3936,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58930},"rest":"https://alion.io/mcp/rest/get_company?id=58930"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsitime-sr-manager-security-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsitime-sr-manager-security-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsitime-sr-manager-security-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sitime-sr-manager-security-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsitime-sr-manager-security-operations"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3481438}},{"tool":"search_jobs","arguments":{"company":"sitime.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3481438},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}