Director, Security Engineering & Vulnerability Management

SiTime is the Precision Timing company.

Timing is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.

Our semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: .

Reporting to the Chief Information Security Officer, this leader will own security engineering and vulnerability management across SiTime's corporate, infrastructure, and lab environments, protecting the company's intellectual property, operations, and customer commitments as SiTime scales. It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening baselines that everything else depends on.

The role combines strategy with execution: setting direction, selecting, deploying, operating, and maintaining security tools, and leading a blended team of employees and contractors to measurable risk reduction.

• Own SiTime’s security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls, across selection, architecture, deployment, configuration, integration, upgrades, and lifecycle management.
• Operate and mature the existing stack, moving tools from deployment into steady-state operation with Security Operations, and own configuration health, alert quality, and control effectiveness measurement for every platform.
• Drive coverage to a defined standard and prove it with evidence rather than assumption, so there are no unmanaged endpoints, servers, cloud workloads, or lab systems.
• Define security configuration standards for endpoints, servers, and infrastructure, plus security requirements for enterprise platforms owned by IT Engineering. Drive adoption with IT and validate that implementations meet those requirements.
• Protect lab and engineering environments, including network segmentation and compensating controls for systems that can’t be patched or run standard agents.
• Build and maintain integrations and automation between security tooling, IT service management, identity, and the SIEM, so detection and response teams get the visibility, signal, and context they need without manual effort.
• Lead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.

• Build and run an enterprise vulnerability management program across endpoints, servers, network devices, lab systems, and cloud assets
• Establish accurate asset inventory and scanning coverage as the foundation of the program
• Prioritize remediation by exploitability, exposure, and business criticality, with a focus on design IP and critical operations
• Set remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations
• Respond quickly to critical and actively exploited vulnerabilities

• Lead and develop a team of security engineers and contractors; hire as the function grows
• Partner closely with IT, engineering, and lab operations
• Define and report metrics to the CISO and leadership,…