Top Cybersecurity Jobs in San Francisco, CA

Lead design, build, and deploy of large-scale data platforms for LLMs, RAG, and agentic AI systems. Hands-on coding, architecting fault-tolerant pipelines, establishing MLOps/DataOps best practices, mentoring engineers, and operationalizing research into production across Exabyte-scale distributed systems.

Leads internal and external compliance audits, assessments, attestations, and certifications across security, privacy, and enterprise frameworks. Develops system integrations and scalable automation to streamline audit and compliance programs. Communicates with internal and external stakeholders, evaluates risks, improves information security processes, and applies AI technologies to enhance workflows and decision-making.

Assesses customer Falcon environments, identifies security-standard misalignment, recommends remediation, and communicates directly with customers. Documents and resolves issues within SLAs, prepares service reports, partners with internal teams, and coordinates troubleshooting. The role requires cybersecurity experience, customer-facing communication, knowledge of Windows, Linux, and macOS, threat detection and incident response expertise, relevant education or experience, and cybersecurity certifications. Government customer requirements may include periodic drug testing and background and fingerprint checks.

Analyzes intrusions and adversary activity using endpoint and security telemetry, communicates findings to customers, conducts active and passive threat hunting, and researches emerging threats. The role also improves detection capabilities, investigates cloud and identity activity, builds tools, and collaborates with cybersecurity teams to protect customer networks from threat actors.

Develop and maintain SOAR playbooks, AI-powered workflows, and PowerShell/Python automation for Falcon Complete’s managed detection and response operations. Build security enrichment, remediation, forensic, and SIEM-integrated workflows; parse security data using JSON and regular expressions; maintain scripts with Git; and collaborate with SOC and engineering teams to improve analyst efficiency. The role also supports AI integration, incident response automation, and evaluation of emerging cybersecurity technologies.

Analyzes the exposure management competitive landscape, synthesizes technical and market intelligence, conducts win/loss analysis, supports competitive deals, develops field enablement materials, and recommends product and go-to-market strategies. Partners with Product, Sales, Marketing, Strategy, Investor Relations, and senior leadership to translate complex cybersecurity concepts into actionable guidance and executive insights.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Conduct AWS cloud threat hunting for global clients using Falcon, threat intelligence, cloud logs, queries, and scripts. Review configurations, identify adversarial activity and unauthorized access risks, develop defensive recommendations, and manage client projects. Communicate findings through technical reports, presentations, and stakeholder briefings, including to CISO-level audiences, regulators, and legal counsel.

Lead product marketing strategy and go-to-market execution for Falcon Exposure Management. Develop positioning, messaging, launches, thought leadership, web strategy, and field enablement while partnering with product, sales, marketing, and executive teams. Translate cybersecurity capabilities into customer value and business outcomes, guide market education, analyze buyers and competitors, and strengthen CrowdStrike’s category leadership. The role requires deep exposure management expertise, strong cybersecurity knowledge, exceptional communication skills, and 12–15+ years of relevant experience.

Conduct red team and penetration testing assessments across operating systems, applications, databases, and network infrastructure. Simulate threat actors using the Kill Chain and MITRE ATT&CK Framework, identify vulnerabilities, and communicate findings and recommendations to technical teams and executives. Support information security program improvements, provide crisis-operation guidance, and perform technical operations with an OPSEC mindset. The role also requires security tool expertise, scripting and automation, AI application, and occasional travel.