Principal Security Engineer

Based in Santa Clara, this position requires an in-person presence, offering a unique opportunity to impact our global operations directly.

Responsibilities:

• Lead the design, implementation, and management of security measures for Astera Labs’ IT, cloud infrastructure and products.
• Develop and enforce security policies and procedures to ensure the protection of data and compliance with industry standards.
• Conduct security risk assessments and vulnerability analyses, recommending and implementing appropriate mitigation strategies.
• Oversee incident response planning and conduct breach simulation exercises to ensure the effectiveness of response protocols.
• Design, implement, configure, and support security solutions and tools (e.g., SIEM, IDPS, IAM, MDM)
• Collaborate with cross-functional teams to integrate security best practices into product development and operational processes.
• Provide mentorship and guidance to junior security engineers and other technical staff.
• Stay current with emerging security threats and technologies, continuously enhancing the company’s security posture.
• Work closely with customers and partners to understand security requirements and ensure alignment with Astera Labs' solutions.
• Develop and deliver security training programs for employees to foster a culture of security awareness.

Required experience:

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• Minimum of 10 years of experience in cybersecurity, with at least 5 years in a senior or lead role.
• Hands-on experience working with AWS services such as IAM, CloudTrail, CloudWatch, SecurityHub, GuardDuty, Inspector, Shield, WAF, KMS, Secrets Manager, and CloudWatch.
• In-depth knowledge of security frameworks and compliance standards such as ISO 27001, SOC2, NIST, and CIS.
• Proficiency in security technologies, including firewalls, intrusion detection/prevention systems, SIEM, and encryption.
• Experience with securing M365, network, and cloud, particularly in AWS environment.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Strong communication and interpersonal skills, with the ability to work effectively with diverse teams.

Preferred experience:

• CISSP, OSCP, GIAC, and or AWS Certified Security Specialty a plus
• Experience in the semiconductor industry or with connectivity solutions (PCIe, CXL, Ethernet) is a significant advantage.
• Active participation in the security community, including contributions to open-source projects, publications, or speaking engagements at security conferences.
• Knowledge of machine learning and AI security implications.
• Experience with DevSecOps practices and tools.

The base salary range is $160,000 - $240,000. Your base salary will be determined based on your location, experience, and the pay of employees in similar positions.