Top Cybersecurity Jobs in San Francisco, CA

Design and maintain data pipelines, models, and transformation layers for analytics. Build data contracts, observability and lineage tooling, collaborate with product engineering, and optimize data structures for performance and scalability.

Lead and grow a data engineering team building and modernizing the core data platform for cybersecurity products. Define technical strategy and data models, ensure data quality for detection and analytics, champion AI-assisted engineering, oversee production support and incident response, collaborate with cross-functional teams, and drive hiring and best practices to deliver scalable, high-performance data pipelines and storage.

Lead expert-level adversary hunting for ICS/OT threats: own threat groups, author finished intelligence, run proactive/reactive hunts, support incident response, improve data/tooling (Synapse/StormQL), mentor peers, and represent Dragos externally through reports and briefings.

Lead and manage an adversary hunting team focused on OT threat groups. Perform hands-on hunting using Synapse and Storm Query Language, produce WorldView reports and detection artifacts, collaborate with intelligence and malware analysis, refine KPIs, support incident response surges, recruit and develop staff, and represent the team externally.

Hunt, identify, and analyze adversary tools, malware, and tradecraft targeting ICS/OT. Develop and maintain analysis tools and scripts, contribute to threat assessments and customer advisories, leverage intel and network analysis tools, recommend automation and telemetry improvements, and support incident response and external communications.

Lead design and modernization of scalable, secure data systems and real-time pipelines for xOT cybersecurity. Create data contracts, observability, lineage, and cross-functional solutions supporting cloud and on-prem deployments, Kubernetes, and stream processing to enable threat detection and intelligence.

Design and maintain data pipelines, data contracts, and transformation layers for analytics. Model complex sources, enable observability and lineage, collaborate with product teams, and optimize data structures for scalable cybersecurity and industrial datasets.

Design, build, and ship production software that identifies, fingerprints, and interacts with network-connected devices (embedded, IoT, OT/ICS). Analyze network captures and undocumented protocols, develop automation and shared frameworks, write automated tests, troubleshoot production issues, and mentor engineers. Collaborate with product, research, and customer teams and use AI coding tools to accelerate development.

Design and implement high-performance backend systems in Rust, optimize architectures, participate across the development lifecycle (debugging, testing, optimization), integrate third-party devices and data, incorporate AI tools, mentor senior engineers, and lead architectural and technical strategy across teams.

Own and operate Dragoscloud fleet across Azure, AWS, and GCP. Build Terraform IaC, manage fleet health, networking, IAM, secrets, observability (Datadog), on-call incident response, SRE practices, compliance (FedRAMP/SOC2), and automation for customer environments.