Top Security Engineer Jobs in San Francisco, CA

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead design, implementation, and operational management of enterprise security controls: investigate malware and threats, expand SIEM detections, deploy DLP, secure SaaS and endpoints, harden configurations, run forensics and incident response, automate detections and reporting, and mentor junior engineers while participating in on-call rotations.

Detect, investigate and respond to malware, phishing and other incidents across corporate IT. Perform digital forensics and threat hunting, design and deploy corporate security controls, alerts and workflows, secure identity providers, endpoints, networks and cloud platforms, and operate/configure security tooling to prevent and remediate incidents.

Lead detection, investigation and response to malware, phishing, and corporate incidents. Design and deploy corporate security controls, alerts, and tooling. Perform digital forensics, hunting across logs, secure identity, endpoints and networks, and remediate issues across corporate platforms.

Design, build, and operationalise product and infrastructure security controls; develop detection and incident response workflows; leverage endpoint, network, and cloud telemetry for threat hunting; conduct forensic analysis and remediation; embed security across engineering teams and improve resilience and secure scale of services.

Detect, investigate, and prevent threats across corporate IT by performing incident response, digital forensics, threat hunting, designing security controls and alerts, and deploying and operating security tooling across identity, endpoints, networks and cloud.

As an Enterprise Security Engineer, you'll secure endpoints, identity systems, and cloud services, focusing on automation and proactive security measures. You'll collaborate with IT and engineering teams to enforce security controls and develop AI-assisted workflows for improved threat detection.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

The Senior Security Engineer will secure cloud infrastructure across various services, develop security policies, manage exceptions, and respond to security alerts while collaborating with teams to eliminate security risks.

Design and build backend services for a digital asset custody platform, including secure transaction orchestration, wallet lifecycle management, integrations with custody providers and blockchain infrastructure, resilient APIs, high-availability systems, observability, and close collaboration with security and product teams.

The AppSec Vulnerability Management Engineer will identify vulnerabilities, manage compliance, and collaborate on security practices within development teams. Key tasks include vulnerability scanning, compliance tracking, executive reporting, and incident response support.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

Design, build, and operationalize ML-based security and anomaly detection across large-scale telemetry. Own feature engineering, model training, evaluation, deployment, drift monitoring, and SOC feedback loops. Partner with SOC, threat intel, and fraud teams to reduce noise and improve detection coverage, and mentor engineers on applied ML and detection operations.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

As a Cloud Security Engineer, you'll secure cloud infrastructure, manage AWS and Kubernetes security solutions, conduct assessments, and mentor engineers.

As a Security Production Engineer, you'll ensure security systems' reliability, develop automation, collaborate on performance optimization, and mentor team members.

Design and implement multitenant workload and network isolation for bare-metal and virtualized GPU infrastructure. Harden Linux kernel and container runtimes, perform threat modeling and penetration testing, write low-level security code (C/Go/Rust), mitigate GPU and PCIe security risks, and lead incident response and forensic work for ephemeral container environments.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).