Top Senior Security Engineer Jobs in San Francisco, CA

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Secure LiteLLM’s Python application, cloud infrastructure, CI/CD pipeline, and software releases. Responsibilities include vulnerability remediation, pull request and architecture reviews, GitHub Actions hardening, secrets detection, credential management, release signing, IAM and workload identity improvements, security guardrails, documentation, and ownership of product and pipeline security initiatives.

Develop and implement security features for embedded devices, PCs, and workstations. Responsibilities include secure boot, encryption, key management, device identity, secure communications, hardware-backed security, threat modeling, vulnerability analysis, testing, and remediation. Collaborate with firmware, operating system, hardware, cloud, and design teams while developing software in C, C++, Java, and related environments.

Design, review, and verify security for Cisco network devices across hardware, firmware, and software. Develop threat models, conduct architecture and code reviews, identify root weaknesses, create reusable security controls, and test implementations with reproducible evidence. Assess embedded and IoT device security using C/C++ review, Python tooling, CWE, MITRE EMB3D, and OWASP IoT frameworks. Collaborate globally with engineering teams, mentor others, prioritize risks, and potentially develop AI-enabled workflows, static-analysis rules, secure wrappers, and CI/CD guardrails.

Lead detection engineering, threat hunting, digital forensics, incident response, and security automation across cloud, bare-metal, and AI infrastructure. Build detection rules, response playbooks, SOAR pipelines, and AI-powered investigation workflows; conduct complex incident investigations, harden systems, improve telemetry, participate in on-call operations, perform post-incident reviews, and mentor security engineers.

Design and operate secure endpoint and SaaS controls across GitLab’s remote workforce, with a primary focus on macOS. Build Terraform and GitOps automation, enforce security baselines, manage patching and software distribution, improve endpoint telemetry and detections, and partner with IT and security teams. Mentor engineers and serve as a senior escalation point for complex endpoint security issues.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Build and deploy GenAI, ML, RAG, and agentic systems while conducting offensive security research and red teaming against AI applications. Identify prompt injection, data leakage, model theft, adversarial attacks, and other vulnerabilities; develop scanning and fuzzing tools; and implement secure-by-design hardening strategies. The role also involves cross-functional collaboration, technical research and writing, threat intelligence monitoring, community representation, and mentoring engineers.

Build and maintain scalable security platforms, automation, APIs, detections, and internal tooling for a cloud-native SaaS environment. Secure AI applications, LLM services, identities, SaaS platforms, cloud infrastructure, and APIs. Develop controls against prompt injection, data leakage, model misuse, and excessive permissions while supporting vulnerability management, incident response, threat modeling, and security operations.

Lead Aircall’s detection and response program by building detection logic, SIEM data pipelines, security automation, and AI-enabled investigation tools. Own security infrastructure across AWS environments, conduct threat hunting and incident response, and improve detection maturity through documentation, tuning, metrics, and post-incident reviews. Partner with engineering, product, fraud, privacy, and legal teams while participating in on-call rotations and hiring.

Build, validate, deploy, tune, monitor, and retire high-confidence security detections across SIEM, endpoint, cloud, identity, SaaS, developer, and AI environments. Translate incidents, threat intelligence, hunts, and red-team findings into tested detection logic. Improve detection-as-code workflows, telemetry quality, coverage tracking, and alert context while reducing false positives. Partner with responders and security teams, conduct reviews, document operational content, and coach analysts and engineers.

Own product security across robots, embedded systems, firmware, cloud infrastructure, APIs, mobile applications, and fleet operations. Lead threat modeling, secure architecture reviews, vulnerability research, penetration testing, code review, incident response, detection engineering, and security tooling. Establish security standards, automate testing, investigate incidents, and partner closely with engineering teams to harden systems and ship secure fixes.

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Own and scale Komodo Health’s application and product security program across software repositories, CI/CD pipelines, cloud deployments, and AI features. Build security automation, configure SAST/SCA/DAST tooling, conduct threat modeling and penetration-test remediation, secure software supply chains, and establish AI security guardrails. Partner closely with Engineering and Forward Deployed Engineering teams, support customer security reviews, improve vulnerability management, and maintain SOC 2 readiness.

Design, develop, deploy, monitor, and maintain AI-enabled enterprise and cloud security solutions. Build machine learning workflows, data pipelines, and scalable security capabilities using Python, Java, TensorFlow, and related libraries. Analyze security risks and data quality, translate technical findings into client recommendations, support security controls across cloud and infrastructure environments, review deliverables, and mentor junior team members.

Owns and improves Microsoft security platforms across Azure, Microsoft 365, and hybrid infrastructure. Implements Zero Trust, identity, endpoint, application, cloud, and data security controls; develops automation with PowerShell, Graph, KQL, APIs, Bicep, and Terraform; integrates security telemetry; supports detection and incident response; documents controls for audits and compliance; mentors engineers and partners with platform teams.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Lead application and infrastructure security for LiteLLM, focusing on Python code reviews, vulnerability remediation, threat modeling, secure development tooling, CI/CD and supply-chain security, cloud and IT controls, incident response, and LLM-specific attack testing. Partner closely with engineers to strengthen authentication, authorization, tenant isolation, secrets management, deployment security, monitoring, vulnerability management, and disclosure processes.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Owns the external attack surface management platform, including asset discovery, exposure analysis, risk prioritization, remediation coordination, integrations, automation, reporting, onboarding, and operational standards. Partners with security, cloud, network, infrastructure, application, and business teams to validate findings, reduce risk, investigate externally exposed assets, and improve platform effectiveness.