Top Cybersecurity Jobs in San Francisco, CA

Design and implement secure-by-default cloud infrastructure across AWS: build secrets management and IAM solutions, ship production backend changes, model threats and prioritize risk-based controls, guide partners on security and privacy, and participate in incident response and mitigation.

Build and operate high-signal detections across cloud, identity, endpoints, and SaaS. Improve detection platforms, automation, and triage tooling (including LLM-based workflows). Translate threat TTPs into telemetry and detections, participate in incident response/on-call, track metrics like MTTD and alert quality, and drive detection engineering improvements across the org.

Design and build security foundations for AI products, including agent runtimes, tool permissions, retrieval, content writes, observability, and auditability. Create reusable security libraries, guardrails, test fixtures, and automated red-team testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe mutations. Translate threat models into engineering requirements and launch criteria, and continuously harden systems using production signals and incident learnings.

Build and maintain corporate security controls across identity, endpoints, and SaaS. Harden IAM (Okta, Google Workspace), run endpoint security for a macOS-first fleet, secure AI tool usage, reduce SaaS risk with SSPM and automation, and write Python/Terraform to automate access reviews, onboarding/offboarding, and audit evidence. Partner with Detection & Response and support SOC 2/ISO 27001 compliance and corporate incident response.