Principal, Security Engineering - Santa Clara, CA, United States

Originally posted 29 September 2026 by the employer.

About the role

This role builds and leads SiTime's Security Engineering function, owning endpoint and network detection platforms, data protection, cloud and SaaS posture, and hardening baselines. The position involves defining control requirements, validating implementations, and operating the security-specific stack.

What you'll do

• Own the security tool estate end to end, including architecture, deployment, configuration, integration, upgrade, and lifecycle management.
• Drive coverage to a defined standard for endpoints, servers, cloud workloads, or laboratory systems.
• Build and maintain integrations and automation between security tooling, IT service management, identity, and SIEM.
• Operate, maintain, and scale DLP, including classification of design data and source code, data security posture, and data loss prevention.
• Engineer role-based access controls and privileged access management.
• Implement AI security posture management and technical guardrails for sanctioned AI use.

What you'll need

• 6+ years in security engineering, including 2+ years building or rebuilding a security platform estate.
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
• At least one of the following certifications: CISSP, CISA, CCSK, OSCP.
• People leadership or technical lead experience.
• Hands-on deployment and operation of endpoint detection, network detection, infrastructure vulnerability scanning, SIEM, data loss prevention, and cloud security platforms at enterprise scale.
• Strong depth in the Microsoft security stack.
• Automation and scripting capability, for example PowerShell, Python, and infrastructure as code.
• Technical fluency across cloud platforms (Azure, AWS), infrastructure security (network, endpoint, IAM), and identity architecture.

Nice to have

• Experience in a semiconductor, hardware, or fabless/manufacturing environment, or another regulated hardware/OT-adjacent industry.
• Experience securing laboratory, test, and engineering networks, including segmentation and egress control.
• Experience with hardware root of trust, secure boot, or device attestation.
• Experience deploying Microsoft Purview classification and data loss prevention at scale.

Skills: security tooling, endpoint and network detection, data protection, cloud and SaaS posture, hardware root of trust