Top Security Engineer Jobs in San Francisco, CA

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

As a PSIRT Engineer, you'll manage vulnerability response programs, overseeing the lifecycle of security vulnerabilities from intake to public disclosure, while coordinating with engineering and security teams for remediation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead incident response and threat hunting efforts at CoreWeave, owning cybersecurity incidents end-to-end and developing AI-powered tools to enhance defense against threats.

As a Solutions Architect, engage with customers to architect cloud solutions, optimize workloads, and provide technical leadership while collaborating with engineering teams.

The Senior Application Security Engineer will implement security controls for space systems, ensuring compliance with government standards while collaborating with engineering teams to enhance security practices and respond to threats.

As a Senior Cloud Security Engineer, you will implement security controls for multi-cloud environments, develop security tooling, and collaborate on cloud architecture.

Define cloud security standards and reference architectures across AWS, GCP, and self-managed Kubernetes. Lead threat modeling, detection engineering, incident response, cloud forensics, IaC/CI-CD security (Terraform), vulnerability management, and mentor other engineers.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Design, implement, and support enterprise physical security systems (video surveillance, access control, sensors, IoT). Consult with clients, develop technical architectures, configure and test systems, troubleshoot hardware/software, manage projects, run design workshops, and support sales and delivery. Travel 25-50% and perform hands-on installations and network-integrated solutions.

Manage and automate security operations across SaaS and endpoints: deploy and tune PHI DLP, run AI-powered email security, configure MDR/EDR, harden Okta and Google Workspace, lead incident response, automate compliance evidence collection, maintain runbooks, and build automation and reporting to improve security posture.

Partner with sales to design and present data security solutions, lead technical evaluations and custom configurations, gather customer requirements, and drive successful hands-on proof-of-concept and evaluation outcomes for the Data Security business line.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Perform deep security assessments of open source framework internals (routing, middleware, caching, build tooling), find and fix systemic vulnerability classes, own disclosure/CVE processes, triage and run OSS bug bounty reports, build preventive tooling (linters, codemods, CI), and harden supply chain practices for Vercel-maintained projects.

Embedded senior security engineer owning end-to-end security for v0: proactively find and fix vulnerabilities, build security features (sandboxing, isolation, permission boundaries), review launches, manage HackerOne reports, refine threat models, harden code execution, and respond to v0-specific incidents while shipping product features alongside the team.

Design and implement security controls for identity, access management, and endpoint security. Lead initiatives around zero trust and phishing-resistant MFA.

The Staff Cloud Security Engineer will secure cloud infrastructure for Huntress, focusing on product security, risk management, and compliance for a SaaS platform. Responsibilities include collaborating with DevOps, managing vulnerabilities, threat modeling, and developing incident response strategies.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Design, build, and architect IAM-focused security software, APIs, and automation. Integrate security into CI/CD and cloud-native environments, perform code reviews and threat modeling, monitor security events, support incident response, and collaborate with infra/app teams to embed identity best practices.

Lead and implement security engineering controls across the platform: identify real risks, build secure-by-default libraries and guardrails, enforce least-privilege for services protecting patient data, harden developer machines, and partner with compliance to convert requirements into effective technical controls.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

The role involves managing cloud and infrastructure vulnerability management, securing environments, incident response, and compliance tracking. You will also collaborate with various teams to optimize security posture and automate scanning processes.