Director, Security Engineering & Vulnerability Management

SiTime Corp.; Santa Clara (CA); On-site; USD 179,000 - 256,000; Full time

Job summary

SiTime Corp. is seeking a senior security leader reporting to the Chief Information Security Officer to own security engineering and vulnerability management across SiTime's corporate, infrastructure, and lab environments, protecting the company's intellectual property, operations, and customer commitments as SiTime scales.

It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening

Qualifications

• 10+ years in information security leadership and security engineering
• Experience building risk-based vulnerability management programs
• Experience deploying enterprise security tools and controls
• Working knowledge of endpoint security, secure configuration, network segmentation, and identity and access controls
• Ability to translate technical risk into clear priorities and executive reporting
• Strong partnership skills with IT, engineering, and business teams
• Experience with security integration during acquisitions
• Familiarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and SOX IT controls
• At least one of CISSP, CISA, CCSK, OSCP
• People leadership or technical lead experience

Responsibilities

• Own SiTime’s security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls, across selection, architecture, deployment, configuration, integration, upgrades, and lifecycle management.
• Operate and mature the existing stack, moving tools from deployment into steady-state operation with Security Operations, and own configuration health, alert quality, and control effectiveness measurement for every platform.
• Define security configuration standards for endpoints, servers, and infrastructure, plus security requirements for enterprise platforms owned by IT Engineering. Drive adoption with IT and validate that implementations meet those requirements.
• Protect lab and engineering environments, including network segmentation and compensating controls for systems that can’t be patched or run standard agents.
• Build and maintain integrations and automation between security tooling, IT service management, identity, and the SIEM, so detection and response teams get the visibility, signal, and context they need without manual effort.
• Lead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.

Skills

Security leadership

Vulnerability management

Risk-based thinking

Executive reporting

Partnership with IT/Engineering

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field

Tools

Endpoint protection

Vulnerability scanners

Email security

SIEM

Data protection tools

Job description

SiTime Corp. is seeking a senior security leader reporting to the Chief Information Security Officer to own security engineering and vulnerability management across SiTime's corporate, infrastructure, and lab environments, protecting the company's intellectual property, operations, and customer commitments as SiTime scales.

It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening