Top Cybersecurity Jobs in San Francisco, CA

Pre-sales technical lead for CrowdStrike Falcon NG-SIEM: own technical relationships through the sales cycle, demonstrate capabilities, answer technical questions, advise customers, enable expansions, gather product feedback, collaborate cross-functionally, and help define go-to-market strategy and integrations to grow NG-SIEM adoption.

Serve as the technical bridge in sales: identify customer requirements, design and demonstrate security solutions, prepare proposals/RFP responses, provide product feedback to engineering, develop technical marketing materials, and build customer and partner relationships while staying current on security trends.

Delivers strategic cybersecurity advisory engagements for management-level clients. Assesses and develops security and incident response programs, creates exercises and scenarios, identifies emerging cyber trends, and produces reports, presentations, recommendations, and findings. The consultant also contributes to thought leadership and methodology development while managing multiple projects independently and traveling to client sites up to 30% of the time.

Perform real-time detection, containment, and remediation of security incidents across Windows, macOS, and Linux. Conduct malware and forensic analysis, develop detection processes and countermeasures, produce customer communications, and contribute thought leadership and public-facing content.

Design and train LLMs and agentic systems for cybersecurity using RLHF/RLAIF and supervised fine-tuning. Build agent architectures, tooling, retrieval/memory, and evaluation pipelines with rigorous statistical benchmarking. Optimize prompts and inference, collaborate with engineers to productionize prototypes, and drive research on agent planning, safety, and reliability.

Conduct cloud-focused Red Team/Blue Team (CRTBT) engagements, emulating adversary TTPs against customer cloud environments, collaborate with client SOC/IR teams, manage engagements end-to-end, develop automation and tooling for adversary emulation, and recommend long-term enhancements to improve cloud detection and response.

Lead planning, deployment, and operational support for CrowdStrike Falcon cloud security modules (CWP, CSPM, ASPM, SSPM). Perform implementations, scripting, IaC, container and CI/CD integrations, troubleshooting, customer training, mentorship, cross-team coordination, and support incident response and compromise assessments.

Perform proactive and active threat hunting across government cloud environments, analyze adversary activity, develop and implement detections, conduct intrusion and forensic analysis, contribute to threat intelligence and detection engineering, and communicate findings to technical and executive stakeholders while enhancing Falcon platform capabilities.

Conduct cloud-focused Red Team/Blue Team engagements as the Blue Teamer: support SOC/IR in real-time threat hunting, detection engineering, and incident response during adversary emulation. Manage engagements end-to-end, deliver reports, and recommend long-term enhancements to improve detection, response, and recovery. Provide client-facing consulting, project management, and relationship-building with technical and executive stakeholders.

Sell and demonstrate CrowdStrikes platform by owning technical conversations, delivering tailored presentations and POVs, managing demos, and collaborating with sales and engineering. Provide expertise across AV/EDR, incident response, forensics, SIEM, cloud, identity, and AI/ML-based detection while supporting customer evaluations and technical decision-making.