Top Security Engineer Jobs in San Francisco, CA

Build and operate high-signal detections across cloud, identity, endpoints, and SaaS. Improve detection platforms, automation, and triage tooling (including LLM-based workflows). Translate threat TTPs into telemetry and detections, participate in incident response/on-call, track metrics like MTTD and alert quality, and drive detection engineering improvements across the org.

The Senior Staff Security Engineer will lead edge and network security strategies, overseeing design, operation, and incident response for Gusto's security posture, requiring substantial expertise in Cloudflare and AWS.

Build and maintain corporate security controls across identity, endpoints, and SaaS. Harden IAM (Okta, Google Workspace), run endpoint security for a macOS-first fleet, secure AI tool usage, reduce SaaS risk with SSPM and automation, and write Python/Terraform to automate access reviews, onboarding/offboarding, and audit evidence. Partner with Detection & Response and support SOC 2/ISO 27001 compliance and corporate incident response.

Role focuses on ensuring data center security and resiliency, implementing controls and controls compliance, and protecting export-controlled information. The posting emphasizes eligibility to access export-controlled data and does not list specific technical duties or tools.

Detect, investigate, and respond to security incidents; maintain logging and SIEM operations; build detections and visibility; support PCI/SOC2/ISO audits; manage endpoint, email, and GitHub security; collaborate across teams and improve on-call and security tooling.

The Enterprise Security Engineer will focus on establishing a security program centered on zero trust, identity management, and automation while ensuring compliance and protecting sensitive data.

Lead and scale the product security program by embedding security into the SDLC, performing threat modeling and architecture reviews, building security-as-code tooling and CI integrations, conducting application/cloud/mobile testing, mentoring engineers, and driving remediation and security ownership across product teams.

Lead technical strategy and architecture for software security across Block. Design and deliver security solutions, drive Secure SDLC adoption, threat model critical systems, mentor engineers, and execute high-priority security initiatives for scalable, resilient security services and mobile/platform security.

Detect, investigate and remediate security incidents across corporate IT. Perform digital forensics and hunting, design and deploy corporate security controls and alerts, secure identity providers, endpoints and networks, and operate security tooling to prevent malware, phishing and unauthorized access.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

The Security Engineer will enhance corporate security controls, develop policies, manage AI security, and assess risks while ensuring secure employee operations.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Lead product security work across Vercel: threat modeling, secure code reviews, open-source and supply-chain security, SDLC tooling and automation, bug bounty triage, cross-team security projects, and customer-facing security support to embed security across development and platform operations.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

Lead detection and response efforts: build detections, manage SIEM and orchestration tooling, deploy AI in SOC workflows, investigate incidents across AWS/EKS environments, support threat modeling and vulnerability scanning, and take on-call shifts.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.