Director, Security Engineering & Vulnerability Management

SiTime Corporation•Santa Clara, CA

4d•$179,256 - $256,370

About The Position

Reporting to the Chief Information Security Officer, the Director of Security Engineering & Vulnerability Management owns security engineering and vulnerability management across SiTime’s corporate, infrastructure, and lab environments. The role protects the company’s intellectual property, operations, and customer commitments as SiTime scales. It owns endpoint and network detection platforms, data protection and classification, privileged access, the AISPM platform, cloud and SaaS posture, SIEM, and security hardening baselines. The position combines strategic leadership with hands-on execution: setting direction, selecting, deploying, operating, and maintaining security tools, and leading a blended team of employees and contractors to achieve measurable risk reduction. The director leads security tool lifecycle management, configuration health, integration and automation, standards adoption, and security coverage across endpoints, servers, cloud workloads, and lab systems. The role also establishes and runs an enterprise vulnerability management program, prioritizes remediation based on risk and business criticality, and reports security metrics to the CISO and leadership. The director partners closely with IT, engineering, and lab operations; leads security integration of acquired environments; and manages security vendors and service providers, including budget and contract decisions.

Requirements

10+ years of experience in information security, including experience leading security engineering programs and teams.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
Experience building and operating risk-based vulnerability management programs.
Experience deploying and managing enterprise security tools and controls.
Working knowledge of endpoint security, secure configuration, network segmentation, and identity and access controls.
Ability to translate technical risk into clear priorities and executive reporting.
Strong partnership skills with IT, engineering, and business teams.
Experience with security integration during acquisitions.
Familiarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and SOX IT controls.
At least one of the following certifications: CISSP, CISA, CCSK, or OSCP.
People leadership or technical lead experience.

Nice To Haves

Experience in a semiconductor, hardware, or fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.
Hands-on experience with industry-leading security monitoring and detection tool stacks.
Experience securing laboratory, test, and engineering networks, including segmentation and egress control.
Experience with hardware root of trust, secure boot, or device attestation.
Experience deploying Microsoft Purview classification and data loss prevention at scale.

Responsibilities

Own SiTime’s security tool estate end to end, including endpoint protection, vulnerability scanning, email security, and related controls, from selection and architecture through deployment, configuration, integration, upgrades, and lifecycle management.
Operate and mature the existing security stack, transitioning tools into steady-state operation with Security Operations and owning configuration health, alert quality, and control effectiveness measurement.
Drive security coverage to a defined standard and validate it with evidence across endpoints, servers, cloud workloads, and lab systems.
Define security configuration standards for endpoints, servers, and infrastructure, and security requirements for enterprise platforms owned by IT Engineering; drive adoption and validate implementations with IT.
Protect lab and engineering environments through network segmentation and compensating controls for systems that cannot be patched or run standard agents.
Build and maintain integrations and automation among security tooling, IT service management, identity, and the SIEM.
Lead security integration of acquired environments, including asset discovery, control coverage, and risk remediation.
Build and run an enterprise vulnerability management program spanning endpoints, servers, network devices, lab systems, and cloud assets.
Establish accurate asset inventory and scanning coverage.
Prioritize remediation by exploitability, exposure, and business criticality, with particular attention to design IP and critical operations.
Set remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations.
Respond quickly to critical and actively exploited vulnerabilities.
Lead and develop a team of security engineers and contractors, and hire as the function grows.
Partner closely with IT, engineering, and lab operations.
Define and report metrics to the CISO and leadership, including asset and control coverage, critical vulnerability aging, and remediation timeliness.
Manage security vendors and service providers, including budget and contract decisions.