Principal, Security Engineering

Job Summary

Reporting to the Head of Security Assurance, one of three functions in SiTime's Security Organization under the CISO, this role builds and leads SiTime's Security Engineering function. It owns endpoint and network detection platforms, data protection and classification, privileged access, AISPM platform, Cloud and SaaS posture, SIEM, and the hardening baselines that everything else depends on.

This is a build role. Security Engineering will work closely with IT Engineering which owns the enterprise platforms used for productivity, identity and endpoint management. Security Engineering owns the security-specific stack, defines the control requirements that IT implements, and proves that the resulting coverage and configuration are actually effective. The two functions are joint execution partners.

This is an accountable owner role, not an advisory one. The role partners with IT, Engineering, and its peers in Security Assurance, and with the Security Organization's other two functions:

• Security Operations, which runs detection and response on the platforms this team deploys.
• Security Architecture, which sets the target state and control baselines this team implements.

Security Platform Engineering - Build, Integrate, Operate

• Own the security tool estate end to end: architecture, deployment, configuration, integration, upgrade and lifecycle management.
• Operate and mature the existing stack, from deployment into steady-state operation with Security Operations.
• Drive coverage to a defined standard and prove it, no unmanaged endpoints, servers, cloud workloads or laboratory systems, with evidence rather than assumption.
• Build and maintain integrations and automation between security tooling, IT service management, identity and the SIEM so signal and context flow without manual effort.
• Own configuration health, alert quality and control effectiveness measurement for every platform in the estate.
• Define security requirements for enterprise platforms owned by IT Engineering and validate that implementations meet them.

Data, Identity and Cloud Protection Engineering

• Operate, maintain and scale DLP including classification of design data and source code, data security posture including AI, and data loss prevention across endpoint, email and collaboration.
• Engineer role-based access controls and privileged access management for administrative and break-glass accounts.
• Manage passwordless and phishing-resistant authentication, working with IT Engineering on rollout and support.
• Deploy cloud and SaaS security posture management across clouds and the critical business platforms, and drive misconfiguration to closure.
• Implement AI security posture management and the technical guardrails that make sanctioned AI use safe.
• Engineer hardening baselines and hardware root of trust for endpoints, servers and laboratory systems, and implement ingress and egress enforcement for engineering networks.

Automation, Reliability and Engineering Discipline

• Automate repetitive security operations: onboarding, evidence collection, access review workflow and posture reporting.
• Build the security health dashboards that give the CISO and business leaders real-time visibility into coverage and control effectiveness.
• Own change management, documentation, runbooks and upgrade cadence for the security stack, so the environment stays supportable as it grows.
• Manage technical vendor relationships, support escalations and product roadmap input.
• Provide engineering support to customer audits, certification evidence and incident investigations.
• Scale the function through a mix of engineers and specialist contractors and build a team that operates effectively across India and U.S. time zones.

Qualifications & Requirements:

• 6+ years in security engineering, including 2+ years building or substantially rebuilding a security platform estate.
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field - or equivalent practical experience.
• At least one of the following certifications: CISSP, CISA, CCSK, OSCP
• People leadership or technical lead experience.
• Hands-on deployment and operation of endpoint detection, network detection, infrastructure vulnerability scanning, SIEM, data loss prevention and cloud security platforms at enterprise scale.
• Strong depth in the Microsoft security stack
• Automation and scripting capability, for example PowerShell, Python and infrastructure as code.
• Demonstrated experience proving and reporting control coverage and effectiveness, not just completing deployments.
• Technical fluency across cloud platforms (Azure, AWS), infrastructure security (network, endpoint, IAM) and identity architecture.
• English proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment.

Preferred:

• Experience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.
• Hands-on experience with industry leading security monitoring and detection tool stack
• Experience securing laboratory, test and engineering networks, including segmentation and egress control.
• Experience with hardware root of trust, secure boot or device attestation.
• Experience deploying Microsoft Purview classification and data loss prevention at scale.

Desired Characteristics & Attributes:

• Engineering rigor and a finisher's instinct: takes deployments to full coverage and steady-state operation rather than leaving them at pilot.
• Comfortable owning the documentation, runbooks, upgrades and configuration drift.
• Program management rigor, with the ability to run multiple concurrent cross-functional initiatives to completion.

Compensation Range:

At SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.

The annual base salary range for this role is $148,320 - $203,940. The final offer is determined by factors such as location, experience, education, and training.

In addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals-reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company's future growth and success.