Top Security Engineer Jobs in San Francisco, CA

The Product Security Engineer secures Superhuman’s products and AI systems across the software development lifecycle. Responsibilities include threat modeling, design reviews, secure code reviews, manual testing, vulnerability mitigation, security tooling and automation, bug bounty program improvements, and AI-based security tools. The role partners with engineering teams, communicates security risks and trade-offs, and helps establish secure-by-default platforms and identity models.

Lead enterprise security architecture across endpoint, identity, network, cloud, and data. Define controls, review major initiatives, automate control deployment (IaC/PaC), mentor engineers, and drive zero-trust and cloud security strategy at scale.

Security Engineering Intern responsible for completing a scoped security project, developing automation and investigation tools, researching vulnerabilities, analyzing findings, validating AI-assisted outputs, collaborating with engineers, and documenting and demonstrating solutions. The role requires programming, web and systems knowledge, foundational security understanding, AI familiarity, and current enrollment in a bachelor’s or master’s program.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Design and operate secure endpoint and SaaS controls across GitLab’s remote workforce, with a primary focus on macOS. Build Terraform and GitOps automation, enforce security baselines, manage patching and software distribution, improve endpoint telemetry and detections, and partner with IT and security teams. Mentor engineers and serve as a senior escalation point for complex endpoint security issues.

Leads customer-facing security assurance for enterprise accounts, addressing security questionnaires, risk assessments, RFPs, and contractual requirements. Reviews security and privacy clauses, negotiates risk-based terms with Legal, Sales, Product, and Procurement, and develops security content, playbooks, training, and Trust Center resources. Advises customers on compliance frameworks, cloud and SaaS security, and DevSecOps practices while supporting revenue growth, roadmap decisions, process improvement, and team mentorship.

Build Revel’s security program from the ground up, securing its product, infrastructure, cloud, on-premises, hardware-integrated environments, and software delivery pipelines. Responsibilities include threat modeling, security architecture, Infrastructure as Code, detection and incident response, vulnerability management, compliance with ITAR/NIST/CUI/CMMC requirements, customer security reviews, and security enablement. The role will establish foundational processes and may eventually lead a growing security team.

Lead hardware and embedded security across device design, manufacturing, deployment, updates, and decommissioning. Develop security baselines, conduct architecture reviews and threat modeling, define requirements, validate controls, and drive remediation with hardware engineering teams. Focus areas include secure boot, firmware, FOTA, hardware root of trust, device identity, provisioning, cloud-connected devices, and secure-by-default engineering practices.

Designs and implements product security controls, secure applications, infrastructure, detection strategies, and incident response workflows. Investigates threats using endpoint, network, cloud, telemetry, threat intelligence, and forensic evidence. Conducts threat hunting, tactical forensics, vulnerability assessments, and cybersecurity infrastructure improvements while partnering with Product, Engineering, and Infrastructure teams. The role also establishes security standards, improves resilience, and embeds security practices across Airwallex’s applications and services.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Secure Outset’s AWS infrastructure, Terraform code, application architecture, and product code. Responsibilities include security reviews, penetration-test coordination, vulnerability remediation, incident investigation, SIEM detection engineering, alert response, telemetry improvement, security automation, cloud hardening, IAM, secrets management, and collaboration with engineering and SRE teams. The role leads technical platform investigations during security and privacy incidents and develops practical controls that protect systems without slowing product delivery.

Build and scale Fieldguide’s security function across secure software design, identity and secrets management, cloud and Kubernetes security, and agentic AI security. Partner with engineering and product teams to identify risks, develop secure frameworks, harden cloud controls, enforce AI-agent permissions and tenant isolation, and promote secure development through design reviews and coaching.

Build production security tooling and infrastructure using Terraform, Bash, Go, and Python. Partner with product engineers to design secure features, review Terraform and IAM configurations, automate security workflows, and advise teams on pragmatic vulnerability remediation. The role emphasizes developer enablement, scalable security libraries and tools, cloud security, containerization, and responsible AI use.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Lead enterprise security engineering across DLP, zero-trust networks, endpoint protection, SaaS posture management, email security, and network defense. Design secure architectures, baseline configurations, automation, threat signaling, and risk mitigation strategies. Administer security tools, conduct incident response and threat detection, analyze logs, and support digital forensics. Partner with IT, infrastructure, risk, compliance, and engineering teams while mentoring staff and establishing cybersecurity best practices.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Own product security for Lambda’s AI cloud infrastructure, including threat modeling, design reviews, multi-tenant isolation, code and infrastructure-as-code vulnerability remediation, security tooling, vulnerability management, enterprise security reviews, and secure engineering patterns. Partner across product engineering, data center operations, detection and response, and GRC while mentoring engineers and building Python or Go automation.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Build and lead application security for WRITER’s enterprise AI platform. Responsibilities include threat modeling, secure architecture, SAST/DAST automation, code reviews, secure coding standards, penetration testing, vulnerability remediation, and security controls for AI agents, data pipelines, and model-training environments. The role also researches emerging LLM security threats, partners with engineering teams, and enables secure developer workflows.

Build AI-specific threat detections, automated response playbooks, and detection-as-code frameworks for WRITER’s AI infrastructure. Lead incident response, forensic investigations, and proactive threat hunting across GPU clusters, training pipelines, inference endpoints, and distributed environments. Collaborate with cloud, application security, software security, and AI research teams while maintaining an on-call rotation and improving security automation and coverage.

Provides security architecture and advisory guidance for large-scale cloud and infrastructure initiatives. Conducts threat modeling, security design reviews, risk assessments, and vulnerability mitigation across application and infrastructure stacks. Partners with engineering and product teams to implement secure designs, improve secure development processes, and prioritize risk-based security initiatives. The role requires expertise in cloud security, identity and access management, networking, encryption, and security communication, with preferred experience in offensive security, Kubernetes, code analysis, and infrastructure security tooling.

Build and maintain security across the MeshMesh platform, including threat modeling, security reviews, vulnerability scanning, monitoring, remediation, system hardening, compliance support, and continuous control validation. The role partners with engineering teams to secure cloud-based distributed systems, application and infrastructure environments, and AI-assisted development workflows, including agent loops and tool use.