Top Cybersecurity Jobs in San Francisco, CA

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to technical, executive, and legal stakeholders, and develop runbooks, scripts, automated workflows, and security operations capabilities. Mentor security operations engineers and support insider threat initiatives, cloud security, SIEM reviews, and cross-functional incident coordination.

Leads Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Responsibilities include setting technical strategy, reducing remediation time, developing automation, guiding engineering teams, mentoring security engineers, assessing high-profile vulnerabilities, supporting incident investigations, and participating in on-call response. The role requires extensive security experience, programming proficiency, AWS expertise, vulnerability management knowledge, and practical use of AI/LLM tooling.

Design and build cloud governance systems spanning IAM, security controls, compliance enforcement, and software supply-chain security across AWS and GCP. Translate regulatory requirements into automated controls, develop SAST/DAST and secure CI/CD tooling, operate reliable distributed systems, contribute to security roadmaps, and collaborate across infrastructure, security, compliance, and engineering teams.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Own hardware certification and cybersecurity compliance for connected vehicle devices and OEM partnerships. Coordinate audits, translate ISO 21434 and other requirements into engineering controls, support threat modeling and firmware analysis, manage FirstNet certification, identify compliance gaps, automate evidence gathering, and communicate security posture and risk to engineering teams, customers, partners, and auditors.

Own end-to-end third-party security risk assessments, vendor tiering, reassessments, remediation tracking, and contract security reviews. Partner with Legal, Procurement, and business owners; support ISO, SOC, and FedRAMP audits; escalate unresolved risks; and maintain dashboards reporting third-party risk posture. The role also supports automation and AI-enabled vendor risk workflows and mentors junior team members.