Top Security Engineer Jobs in San Francisco, CA

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Build, test, automate, and deploy security controls for AWS and Azure cloud workloads. Assess cloud security posture using CSPM tools, integrate controls into CI/CD and infrastructure pipelines, validate compliance, and support production readiness. Collaborate with cloud architects, SOC, product, infrastructure, and DevOps teams; document solutions, analyze vulnerabilities, guide junior engineers, and contribute to security roadmap planning.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Conduct red team and adversary emulation operations across cloud, corporate, production, applications, infrastructure, and AI systems. Perform advanced web, API, cloud, Kubernetes, CI/CD, identity, and secrets security testing; identify attack paths and realistic business impact; collaborate with security and engineering teams on remediation; conduct purple team exercises; and build automation, tooling, and continuous security checks.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Build AI-driven systems for blockchain security, including smart contract analysis, vulnerability discovery, exploit analysis, threat detection, and security investigations. Develop AI agents that reason over codebases, protocol interactions, transactions, and wallet activity. Collaborate with security researchers and infrastructure teams on monitoring and incident response while researching blockchain attack techniques, Web3 infrastructure, and AI security trends.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Own company-wide data security and access controls in Palantir Foundry. Design groups, roles, row- and column-level policies, masking, redaction, identity provisioning, and audit processes. Partner with IT, Security, and infrastructure teams on Okta, SSO, SCIM, network egress, credentials, and AI-agent access. Administer Foundry, maintain parity with source systems, advise teams on sensitive-data use, and lead cross-functional data governance standards.

Administer and troubleshoot enterprise network security platforms, including firewalls, URL filtering, IDS/IPS, 802.1X NAC, VPN, and TLS inspection. Handle security tickets, policy changes, certificate renewals, documentation, and scoped segmentation projects. Support formal change management and collaborate across security, IT, product, and operations teams while meeting SLA and project milestones.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Supports cybersecurity control implementation, security baselines, compliance assessments, risk mitigation, audits, documentation, and vulnerability remediation. Develops and customizes CIS and STIG benchmarks, translates baseline requirements into FISMA and NIST controls, and collaborates with technical teams to protect client systems. The role requires five-plus years supporting IT operations and eligibility for a Public Trust determination. Preferred experience includes cloud, networking, automation, infrastructure-as-code, containers, serverless technologies, monitoring, and security-related certifications.

Provides technical leadership for enterprise security architecture, platforms, and controls across endpoints, infrastructure, applications, and cloud environments. Responsibilities include developing security strategy and roadmaps; implementing endpoint, EDR, zero-trust, application, and infrastructure protections; building scalable security services and automated workflows; and partnering across engineering teams to improve security posture, resilience, and operational excellence.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Own Rox’s end-to-end security program across application, cloud, infrastructure, product, and enterprise deployments. Responsibilities include security tooling, secure design and code reviews, tenant isolation, IAM, secrets, network security, supply-chain security, vulnerability management, incident response, security architecture, customer security reviews, compliance support, and on-call incident response. The role requires strong production software engineering, cloud security expertise, enterprise communication, and Staff-level ownership.

Leads end-to-end incident response, including investigation, containment, recovery, and postmortems. Builds security telemetry pipelines and high-fidelity detections across cloud, Kubernetes, identity, endpoint, SaaS, and application environments. Develops threat intelligence, threat hunting, automated response tooling, incident plans, and tabletop exercises. Partners with infrastructure, research, product, legal, and leadership teams to address sophisticated threats targeting AI labs, including model theft, supply chain compromise, and AI-specific abuse.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Own security end to end as AIUC’s first security hire, securing its product, agent evaluation platform, infrastructure, corporate systems, vendors, data, and customer environments. Build sandboxing, credential isolation, least-privilege access, detection, logging, incident response, and automated security controls. Investigate emerging agent attacks, turn research into production defenses, support customer security reviews, and contribute findings to AIUC-1 standards and its CISO consortium.

Join Notion's Detection and Response team as a Security Operations Engineer, focusing on investigating security events and mentoring junior engineers, ensuring operational excellence in security practices.

Own product security for an AI-driven supply-chain platform, including authentication, authorization, tenant isolation, APIs, threat modeling, secure development practices, vulnerability management, software supply-chain security, and AI agent safeguards. Build the product security function while partnering with engineering, infrastructure, product, customers, and executives. Lead security reviews, penetration testing, vulnerability disclosure, and controls for customer-hosted deployments.