Principal, Security Engineering

SiTime is hiring a Principal, Security Engineering to build and lead its Security Engineering function. The role owns the security technology stack and its operation, including detection platforms, data and identity protection, cloud security, automation, and control effectiveness.

Responsibilities:

• Own the security tool estate end to end: architecture, deployment, configuration, integration, upgrade and lifecycle management
• Operate and mature the existing stack, from deployment into steady-state operation with Security Operations
• Drive coverage to a defined standard and prove it, no unmanaged endpoints, servers, cloud workloads or laboratory systems, with evidence rather than assumption
• Build and maintain integrations and automation between security tooling, IT service management, identity and the SIEM so signal and context flow without manual effort
• Own configuration health, alert quality and control effectiveness measurement for every platform in the estate
• Define security requirements for enterprise platforms owned by IT Engineering and validate that implementations meet them
• Operate, maintain and scale DLP including classification of design data and source code, data security posture including AI, and data loss prevention across endpoint, email and collaboration
• Engineer role-based access controls and privileged access management for administrative and break-glass accounts
• Manage passwordless and phishing-resistant authentication, working with IT Engineering on rollout and support
• Deploy cloud and SaaS security posture management across clouds and the critical business platforms, and drive misconfiguration to closure
• Implement AI security posture management and the technical guardrails that make sanctioned AI use safe
• Engineer hardening baselines and hardware root of trust for endpoints, servers and laboratory systems, and implement ingress and egress enforcement for engineering networks
• Automate repetitive security operations: onboarding, evidence collection, access review workflow and posture reporting
• Build the security health dashboards that give the CISO and business leaders real-time visibility into coverage and control effectiveness
• Own change management, documentation, runbooks and upgrade cadence for the security stack, so the environment stays supportable as it grows
• Manage technical vendor relationships, support escalations and product roadmap input
• Provide engineering support to customer audits, certification evidence and incident investigations
• Scale the function through a mix of engineers and specialist contractors and build a team that operates effectively across India and U.S. time zones

Requirements:

• 6+ years in security engineering, including 2+ years building or substantially rebuilding a security platform estate
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field — or equivalent practical experience
• At least one of the following certifications: CISSP, CISA, CCSK, OSCP
• People leadership or technical lead experience
• Hands-on deployment and operation of endpoint detection, network detection, infrastructure vulnerability scanning, SIEM, data loss prevention and cloud security platforms at enterprise scale
• Strong depth in the Microsoft security stack
• Automation and scripting capability, for example PowerShell, Python and infrastructure as code
• Demonstrated experience proving and reporting control coverage and effectiveness, not just completing deployments
• Technical fluency across cloud platforms (Azure, AWS), infrastructure security (network, endpoint, IAM) and identity architecture
• English proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment
• Engineering rigor and a finisher's instinct: takes deployments to full coverage and steady-state operation rather than leaving them at pilot
• Comfortable owning the documentation, runbooks, upgrades and configuration drift
• Program management rigor, with the ability to run multiple concurrent cross-functional initiatives to completion
• Experience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry
• Hands-on experience with industry leading security monitoring and detection tool stack
• Experience securing laboratory, test and engineering networks, including segmentation and egress control
• Experience with hardware root of trust, secure boot or device attestation
• Experience deploying Microsoft Purview classification and data loss prevention at scale