Top Cybersecurity Jobs in San Francisco, CA

Conduct incident response engagements and intrusion investigations for major organizations. Perform host and network forensics across Windows, macOS, and Linux; hunt for threat actors; analyze network data and malware; support remediation planning; and prepare technical reports, presentations, and recommendations for customers, regulators, legal counsel, and executives.

Supports CrowdStrike Falcon Intel Recon customers by analyzing and triaging cyber threat intelligence, explaining dark web findings, managing customer relationships, escalating noteworthy intelligence, and communicating feedback to Intelligence and Engineering teams. The role requires knowledge of threat intelligence lifecycles, dark web ecosystems, enterprise security, customer engagement, AI-enabled workflows, and presenting technical information to varied audiences. Travel is minimal to light, up to 25%.

Deliver strategic cybersecurity advisory engagements, assess and mature security and incident response programs, develop cyber exercises and policies, analyze emerging threats and risks, and present reports and recommendations to management. The consultant supports complex client projects, contributes to cybersecurity thought leadership and methodology development, manages multiple assignments independently, and travels to client sites up to 30% of the time.

Conduct OSINT investigations and contextual analysis of DPRK state-sponsored cyber adversaries and hacktivists. Track geopolitical, political, and economic developments; produce finished intelligence reports; answer customer RFIs; identify intelligence gaps; and collaborate with technical and customer-facing teams. The role requires high-proficiency Korean, deep knowledge of North Korean government and regional affairs, strong analytical and English writing skills, and effective use of AI technologies.

Leads partner-delivered incident response engagements, coordinating customers, partners, counsel, and CrowdStrike leadership. Oversees forensic investigations, project deliverables, executive communications, malware analysis, threat hunting, and security posture recommendations. Coaches partners on host and network forensics across Windows, macOS, and Linux. Reviews reports for quality, manages cross-functional workflows, improves internal processes, and maintains documentation and templates.

Oversee partner-led incident response and forensic investigations, coordinating CrowdStrike, customers, legal counsel, and external responders. Review investigation quality, scope, findings, reports, and remediation recommendations. Coach partners on host and network forensics, malware analysis, threat hunting, and executive communications across Windows, macOS, Linux, and cloud environments. Support partner relationships, mentor responders, provide thought leadership, and help mature customer security postures.

Leads partner-delivered incident response engagements, coordinating customers, CrowdStrike teams, outside counsel, and forensic investigators. Reviews technical findings and deliverables, supports executive communications, mentors partners on malware analysis and host/network forensics, and ensures investigation quality. The role also manages project tasks, improves internal processes, maintains documentation, and helps organizations strengthen security after incidents.

Manages strategic relationships with cybersecurity services retainer customers, improving preparedness, service utilization, and satisfaction. Coordinates with sales and delivery teams, conducts account reviews, documents follow-up actions, develops customer success plans, scopes services, and supports account expansion. The role also contributes to program improvements and applies cybersecurity, incident response, security framework, and AI knowledge to optimize customer outcomes.

Leads a weekend-shift DFIR consulting team and incident response engagements. Responsibilities include triage, scoping, forensic and malware investigations, threat hunting, remediation planning, executive and customer communication, regulatory and legal reporting, and mentoring analysts across Windows, macOS, and Linux. The role also develops security methods, supports cloud incident response, contributes thought leadership, and may travel up to 30%.

Leads incident response consulting engagements, including triage, scoping, forensic and malware investigations, threat hunting, remediation planning, and executive communications. The role directs investigations with legal counsel, mentors junior analysts, develops security posture recommendations, produces reports and presentations, contributes industry thought leadership, and manages customer-facing response work. Candidates need incident response, computer and network forensics, reverse engineering, cloud response, team leadership, project management, and willingness to travel up to 30%.