Director, Security Engineering & Vulnerability Management

Description

The company is the company, a precision timing company that makes MEMS-based timing devices as an alternative to quartz. The devices are used in more than 400 applications, including AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT, and more than 4 billion have shipped.

This role reports to the Chief Information Security Officer and leads security engineering and vulnerability management across the company's corporate, infrastructure and lab environments. It covers the protection of intellectual property, operations and customer commitments as the company grows. The owner sets direction and also selects, deploys, runs and maintains security tools, while leading a team of employees and contractors toward measurable risk reduction.

The security stack in scope includes endpoint and network detection, data protection and classification, privileged access, the AISPM platform, cloud and SaaS posture, the SIEM, and the hardening baselines other work relies on.

Responsibilities

• Own the full lifecycle of the security tool estate, including endpoint protection, vulnerability scanning, email security and related controls: selection, architecture, deployment, configuration, integration, upgrades and retirement.
• Move tools into steady-state operation with Security Operations, and own configuration health, alert quality and measurement of control effectiveness for each platform.
• Reach a defined coverage standard and show it with evidence, so that no endpoints, servers, cloud workloads or lab systems go unmanaged.
• Set security configuration standards for endpoints, servers and infrastructure, and security requirements for enterprise platforms run by IT Engineering. Drive adoption with IT and verify implementations meet them.
• Protect lab and engineering environments through network segmentation and compensating controls for systems that cannot be patched or cannot run standard agents.
• Build and maintain automation and integrations between security tools, IT service management, identity and the SIEM, so detection and response teams get the visibility, signal and context they need with little manual work.
• Lead security integration of acquired environments, covering asset discovery, control coverage and risk remediation.
• Build and run an enterprise vulnerability management program covering endpoints, servers, network devices, lab systems and cloud assets.
• Establish an accurate asset inventory and full scanning coverage as the base of the program.
• Rank remediation by exploitability, exposure and business criticality, with priority on design IP and critical operations.
• Agree remediation timelines with IT and system owners, track fixes to closure, and manage exceptions and escalations.
• Respond quickly to critical and actively exploited vulnerabilities.
• Lead, grow and hire a team of security engineers and contractors as the function expands.
• Work closely with IT, engineering and lab operations.
• Define and report metrics to the CISO and leadership, such as asset and control coverage, critical vulnerability aging and remediation timeliness.
• Manage security vendors and service providers, including budget and contract decisions.

Requirements

• 10+ years in information security, including leading security engineering programs and teams.
• Bachelor's degree in Computer Science, Information Security, Engineering or a related technical field, or equivalent practical experience.
• Experience building and running risk-based vulnerability management programs.
• Experience deploying and managing enterprise security tools and controls.
• Working knowledge of endpoint security, secure configuration, network segmentation and identity and access controls.
• Ability to turn technical risk into clear priorities and executive reporting.
• Strong partnership skills with IT, engineering and business teams.
• Experience with security integration during acquisitions.
• Familiarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001 and SOX IT controls.
• Hold at least one of: CISSP, CISA, CCSK or OSCP.
• People leadership or technical lead experience.
• Preferred: experience in a semiconductor, hardware or other fabless or manufacturing environment, or another regulated hardware or OT-adjacent industry.
• Preferred: hands-on experience with a leading security monitoring and detection tool stack.
• Preferred: experience securing laboratory, test and engineering networks, including segmentation and egress control.
• Preferred: experience with hardware root of trust, secure boot or device attestation.
• Preferred: experience deploying Microsoft Purview classification and data loss prevention at scale.
• Desired: engineering rigor and a finisher's mindset, taking deployments to full coverage and steady-state operation rather than leaving them at pilot.
• Desired: comfort owning documentation, runbooks, upgrades and configuration drift.
• Desired: program management discipline to run several cross-functional initiatives at once through to completion.

Conditions

Salary range is $179,256 to $256,370 USD.

The role is eligible for a quarterly bonus tied to innovation goals, in addition to base salary.

Equity grants are offered.

Benefits include a 401k plan, health and wellness coverage (medical, dental, vision, life), parental leave, legal services and time off plans.

Review the Get to Know the company section of the career page to learn about the culture and values.

Equal opportunity applies to all applicants.

Benefits

• 401k plan.
• Medical, dental, vision and life coverage, plus health and wellness plans.
• Parental leave, legal services and time off plans.
• Quarterly bonus tied to innovation goals.
• Equity grants.