Top Security Engineer Jobs in San Francisco, CA

Leads application and AI security engineering across architecture, software delivery, cloud platforms, APIs, and agentic AI systems. Builds reusable security controls, automated testing, risk-based quality gates, and secure engineering patterns. Conducts code reviews, threat modeling, authorized security testing, vulnerability triage, incident support, and remediation validation. Partners with distributed engineering teams, mentors technical leaders, and communicates security risks to executives, customers, and assurance stakeholders.

Build and maintain security systems for an AI platform handling sensitive customer interactions. Responsibilities include application, infrastructure, and cloud security; access controls and authorization; audit logging; vulnerability scanning; dependency auditing; secrets management; automated detection; and security tooling. The role involves writing production code, collaborating with backend and infrastructure engineers, and addressing emerging AI-agent risks such as prompt injection and data leakage.

Own security assessment and risk management for AI, LLM, Claude, MCP, and agentic systems. Define security controls, access governance, monitoring frameworks, standards, and training. Partner with AI Enablement and engineering teams on threat modeling, architecture reviews, and secure deployment. Build AI security monitoring tools, investigate risks such as prompt injection and data leakage, and track emerging attack vectors, defenses, and regulations.

Own product and application security for an AI assistant handling sensitive data and autonomous actions across email, calendars, documents, Slack, and CRM systems. Responsibilities include threat modeling agent behavior, securing data pipelines and cloud infrastructure, hardening OAuth integrations, implementing encryption and access controls, establishing a secure development lifecycle, and leading incident response. The role partners closely with engineering and requires in-person work five days per week in San Francisco.

Lead Serval’s application security program across secure SDLC, threat modeling, vulnerability management, security architecture, and secure coding. Build and mentor product security teams, implement automated security tooling and CI/CD gates, manage vulnerability remediation and coordinated disclosure, and partner with Engineering, Product, and Infrastructure on authentication, authorization, tenant isolation, data protection, secrets management, and agentic AI security challenges.

Build and own the company’s product, cloud, and internal security foundations. Responsibilities include developing security controls, securing AI agents and enterprise integrations, managing vulnerabilities and incident response, leading customer security reviews, maintaining trust documentation, supporting SOC 2, ISO 27001, and ISO 42001 readiness, and partnering cross-functionally on security priorities, governance, and compliance.

Design and implement security across infrastructure, applications, data, and AI systems. Own authentication, authorization, tenant isolation, secure log ingestion and querying, and AI security risk mitigation. Lead security incident response and postmortems, establish practical security practices, and partner with engineering to integrate security into development. The role requires application or infrastructure security experience, knowledge of OWASP vulnerabilities, and experience securing distributed systems and APIs.

Lead offensive security assessments, penetration testing, threat modeling, and attack-surface analysis across internet-facing services, APIs, embedded systems, firmware, and device interfaces. Identify vulnerabilities, guide remediation, validate fixes, and shape secure product-development practices. The role also drives risk-reduction initiatives, security architecture reviews, offensive security methodology, and strategic communication with engineering and executive stakeholders.

Build foundational security systems across cloud infrastructure, identity, application security, observability, and internal platforms. Responsibilities include AWS security guardrails, Terraform-based infrastructure, AI workflow sandboxing, secrets management, identity and access systems, application security, multi-tenant isolation, security monitoring, detection, and incident response. The role requires independent project ownership and strong engineering and security instincts.

Build and maintain security systems for an AI platform handling sensitive customer interactions. Responsibilities include application, infrastructure, and cloud security; access controls and authorization; audit logging; vulnerability scanning; dependency auditing; secrets management; automated detection; and security tooling. The role writes production code, partners with backend and infrastructure engineers, and helps address AI-agent risks such as prompt injection and data leakage.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Manages enterprise information assurance and cybersecurity support for DHS/TSA, including incident response, vulnerability management, risk and compliance services, RMF-based assessment and authorization, security audits, POA&M remediation, and security architecture. Coordinates cybersecurity teams, stakeholders, system owners, and government offices while monitoring performance, identifying risks, and recommending mitigation strategies.

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Manages application security assessments and client delivery across cloud environments. Designs security controls for IaaS, PaaS, and SaaS platforms; reviews architectures for vulnerabilities and control gaps; conducts risk assessments and vulnerability testing; guides remediation and security tool usage; monitors emerging threats; coaches security teams; and communicates findings to technical and business stakeholders.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Design, develop, deploy, monitor, and maintain AI-enabled enterprise and cloud security solutions. Build machine learning workflows, data pipelines, and scalable security capabilities using Python, Java, TensorFlow, and related libraries. Analyze security risks and data quality, translate technical findings into client recommendations, support security controls across cloud and infrastructure environments, review deliverables, and mentor junior team members.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.

Designs, implements, and optimizes Microsoft 365 security, compliance, identity, and governance solutions for clients. Configures Microsoft Purview, Entra ID, Defender, DLP, information protection, access controls, and AI-agent security capabilities. Assesses environments, identifies gaps, develops remediation plans, automates administration with PowerShell, and delivers documentation, workshops, testing, and knowledge transfer. The role requires strong consulting and customer-facing skills while supporting technical project delivery across enterprise environments.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.