Top Cybersecurity Jobs in San Francisco, CA

Executive leader responsible for strategy, organization, and outcomes for Threat Detection & Response across SOC, detection engineering, threat hunting, triage, and response. Build multi-year roadmap toward an agentic SOC, partner with Product/Engineering/Data, drive metrics (MTTx, detection coverage/quality), lead cultural change, and develop a deep leadership bench to operate under high-pressure incidents.

Lead product strategy and execution for ITDR and ISPM offerings, manage a small product team, drive discovery through launch, collaborate with engineering, design, sales, and marketing, and measure product success with business metrics.

Lead technical architect and hands-on principal engineer for the SOC Experience team, building scalable investigation workflows, agentic LLM features, automation, remediation actions, and analyst tooling. Drive architecture, mentor engineers, prototype solutions, ensure reliability and observability, and partner with product, UX, and SOC stakeholders to turn operational problems into auditable, production-grade systems.

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

Lead design, development, and delivery of mission-critical SIEM platform features. Define technical vision, own quality and uptime, mentor engineers, collaborate cross-functionally, build AI-assisted workflows, and drive performance, monitoring, and architecture decisions.

Lead technical design and implementation of the ISPM product using Ruby on Rails. Build scalable data pipelines and systems to process large-scale identity telemetry, collaborate with security researchers and product teams, mentor engineers, and set architectural direction for detection and remediation features.

Build and lead development of the ESPM platform using Ruby on Rails. Define technical vision, design scalable data pipelines and architectures for petabyte-scale ingestion, implement features across the stack, collaborate with security researchers, mentor engineers, and ensure high-quality, tested deliveries.