Astera Labs is a global leader in purpose-built connectivity solutions that unlock the full potential of AI and cloud infrastructure. Our Intelligent Connectivity Platform integrates PCIe®, CXL®, and Ethernet semiconductor-based solutions and the COSMOS software suite of system management and optimization tools to deliver a software-defined architecture that is both scalable and customizable. Inspired by trusted relationships with hyperscalers and the data center ecosystem, we are an innovation leader delivering products that are flexible and interoperable. Discover how we are transforming modern data-driven applications at www.asteralabs.com
Based in Santa Clara, this position requires an in-person presence, offering a unique opportunity to impact our global operations directly.
Responsibilities:

• Lead the design, implementation, and management of security measures for Astera Labs' IT, cloud infrastructure and products.
• Develop and enforce security policies and procedures to ensure the protection of data and compliance with industry standards.
• Conduct security risk assessments and vulnerability analyses, recommending and implementing appropriate mitigation strategies.
• Oversee incident response planning and conduct breach simulation exercises to ensure the effectiveness of response protocols.
• Design, implement, configure, and support security solutions and tools (e.g., SIEM, IDPS, IAM, MDM)
• Collaborate with cross-functional teams to integrate security best practices into product development and operational processes.
• Provide mentorship and guidance to junior security engineers and other technical staff.
• Stay current with emerging security threats and technologies, continuously enhancing the company's security posture.
• Work closely with customers and partners to understand security requirements and ensure alignment with Astera Labs' solutions.
• Develop and deliver security training programs for employees to foster a culture of security awareness.

Required experience:

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Minimum of 10 years of experience in cybersecurity, with at least 5 years in a senior or lead role.
• Hands-on experience working with AWS services such as IAM, CloudTrail, CloudWatch, SecurityHub, GuardDuty, Inspector, Shield, WAF, KMS, Secrets Manager, and CloudWatch.
• In-depth knowledge of security frameworks and compliance standards such as ISO 27001, SOC2, NIST, and CIS.
• Proficiency in security technologies, including firewalls, intrusion detection/prevention systems, SIEM, and encryption.
• Experience with securing M365, network, and cloud, particularly in AWS environment.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Strong communication and interpersonal skills, with the ability to work effectively with diverse teams.

Preferred experience:

• CISSP, OSCP, GIAC, and or AWS Certified Security Specialty a plus
• Experience in the semiconductor industry or with connectivity solutions (PCIe, CXL, Ethernet) is a significant advantage.
• Active participation in the security community, including contributions to open-source projects, publications, or speaking engagements at security conferences.
• Knowledge of machine learning and AI security implications.
• Experience with DevSecOps practices and tools.

The base salary range is $160,000 - $240,000. Your base salary will be determined based on your location, experience, and the pay of employees in similar positions.
We know that creativity and innovation happen more often when teams include diverse ideas, backgrounds, and experiences, and we actively encourage everyone with relevant experience to apply, including people of color, LGBTQ and non-binary people, veterans, parents, and individuals with disabilities.