About SiTime

SiTime is the Precision Timing company.

Timing is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.

Our semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com.

Job Summary

Reporting to the Chief Information Security Officer, this leader will own security engineering and vulnerability management across SiTime's corporate, infrastructure, and lab environments, protecting the company's intellectual property, operations, and customer commitments as SiTime scales. It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening baselines that everything else depends on. The role combines strategy with execution: setting direction, selecting, deploying, operating, and maintaining security tools, and leading a blended team of employees and contractors to measurable risk reduction.

Security Engineering

Own SiTime’s security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls, across selection, architecture, deployment, configuration, integration, upgrades, and lifecycle management.
Operate and mature the existing stack, moving tools from deployment into steady-state operation with Security Operations, and own configuration health, alert quality, and control effectiveness measurement for every platform.
Drive coverage to a defined standard and prove it with evidence rather than assumption, so there are no unmanaged endpoints, servers, cloud workloads, or lab systems.
Define security configuration standards for endpoints, servers, and infrastructure, plus security requirements for enterprise platforms owned by IT Engineering. Drive adoption with IT and validate that implementations meet those requirements.
Protect lab and engineering environments, including network segmentation and compensating controls for systems that can’t be patched or run standard agents.
Build and maintain integrations and automation between security tooling, IT service management, identity, and the SIEM, so detection and response teams get the visibility, signal, and context they need without manual effort.
Lead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.

Vulnerability management

Build and run an enterprise vulnerability management program across endpoints, servers, network devices, lab systems, and cloud assets
Establish accurate asset inventory and scanning coverage as the foundation of the program
Prioritize remediation by exploitability, exposure, and business criticality, with a focus on design IP and critical operations
Set remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations
Respond quickly to critical and actively exploited vulnerabilities

Leadership and reporting

Lead and develop a team of security engineers and contractors; hire as the function grows
Partner closely with IT, engineering, and lab operations
Define and report metrics to the CISO and leadership, such as asset and control coverage, critical vulnerability aging, and remediation timeliness
Manage security vendors and service providers, including budget and contract decisions

Qualifications & Requirements

10+ years in information security, including experience leading security engineering programs and teams