Manager, Security Engineering

Own the security tool estate end to end: architecture, deployment, configuration, integration, upgrade and lifecycle management.

Operate and mature the existing stack, from deployment into steady-state operation with Security Operations.

Drive coverage to a defined standard and prove it, no unmanaged endpoints, servers, cloud workloads or laboratory systems, with evidence rather than assumption.

Build and maintain integrations and automation between security tooling, IT service management, identity and the SIEM so signal and context flow without manual effort.

Own configuration health, alert quality and control effectiveness measurement for every platform in the estate.

Define security requirements for enterprise platforms owned by IT Engineering and validate that implementations meet them.

Data, Identity and Cloud Protection Engineering

Operate, maintain and scale DLP including classification of design data and source code, data security posture including AI, and data loss prevention across endpoint, email and collaboration.

Engineer role-based access controls and privileged access management for administrative and break-glass accounts.

Manage passwordless and phishing-resistant authentication, working with IT Engineering on rollout and support.

Deploy cloud and SaaS security posture management across clouds and the critical business platforms, and drive misconfiguration to closure.

Implement AI security posture management and the technical guardrails that make sanctioned AI use safe.

Engineer hardening baselines and hardware root of trust for endpoints, servers and laboratory systems, and implement ingress and egress enforcement for engineering networks.

Automation, Reliability and Engineering Discipline

Automate repetitive security operations: onboarding, evidence collection, access review workflow and posture reporting.

Build the security health dashboards that give the CISO and business leaders real-time visibility into coverage and control effectiveness.

Own change management, documentation, runbooks and upgrade cadence for the security stack, so the environment stays supportable as it grows.

Manage technical vendor relationships, support escalations and product roadmap input.

Provide engineering support to customer audits, certification evidence and incident investigations.

Scale the function through a mix of engineers and specialist contractors and build a team that operates effectively across India and U.S. time zones.

Qualifications & Requirements:

6+ years in security engineering, including 2+ years building or substantially rebuilding a security platform estate.

Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field — or equivalent practical experience.

At least one of the following certifications: CISSP, CISA, CCSK, OSCP

People leadership or technical lead experience.

Hands-on deployment and operation of endpoint detection, network detection, infrastructure vulnerability scanning, SIEM, data loss prevention and cloud security platforms at enterprise scale.

Strong depth in the Microsoft security stack

Automation and scripting capability, for example PowerShell, Python and infrastructure as code.

Demonstrated experience proving and reporting control coverage and effectiveness, not just completing deployments.

Technical fluency across cloud platforms (Azure, AWS), infrastructure security (network, endpoint, IAM) and identity architecture.

English proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment.

Preferred:

Experience in a semiconductor, hardware, or other fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.

Hands-on experience with industry leading security monitoring and detection tool stack

Experience securing laboratory, test and engineering networks, including segmentation and egress control.

Experience with hardware root of trust, secure boot or device attestation.

Experience deploying Microsoft Purview classification and data loss prevention at scale.

Desired Characteristics & Attributes:

Engineering rigor and a finisher's instinct: takes deployments to full coverage and steady-state operation rather than leaving them at pilot.

Comfortable owning the documentation, runbooks, upgrades and configuration drift.

Able to work effectively with a U.S.-based CISO and U.S. stakeholders across time zones, with strong written communication.

Program management rigor, with the ability to run multiple concurrent cross-functional initiatives to completion.

Compensation Range:

At SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.

In addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals—reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company’s future growth and success.

SiTime is an Equal Opportunity Employer . We treat each person fairly and we do not tolerate discrimination or harassment against anyone on the basis of any protected characteristics, including race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, pregnancy, political affiliation, protected veteran status, protected genetic information, or marital status or other characteristics protected by law. SiTime participates in the E-Verify program.

Learn More about SiTime: Review the Get to Know SiTime section of our career page to explore our culture, values, and what makes us unique.

Innovation on Top – Philosophies of Innovation with Rajesh Vashist

Fabrication Knowledge – An Interview with Rajesh Vashist

SiTime Corporation – YouTube