Top Senior Security Engineer Jobs in San Francisco, CA

Lead design, implementation, and operational management of enterprise security controls: investigate malware and threats, expand SIEM detections, deploy DLP, secure SaaS and endpoints, harden configurations, run forensics and incident response, automate detections and reporting, and mentor junior engineers while participating in on-call rotations.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

The Senior Security Engineer will secure cloud infrastructure across various services, develop security policies, manage exceptions, and respond to security alerts while collaborating with teams to eliminate security risks.

Lead incident response and threat hunting efforts at CoreWeave, owning cybersecurity incidents end-to-end and developing AI-powered tools to enhance defense against threats.

Define cloud security standards and reference architectures across AWS, GCP, and self-managed Kubernetes. Lead threat modeling, detection engineering, incident response, cloud forensics, IaC/CI-CD security (Terraform), vulnerability management, and mentor other engineers.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Design and implement security controls for identity, access management, and endpoint security. Lead initiatives around zero trust and phishing-resistant MFA.

The Senior Staff Security Engineer will lead edge and network security strategies, overseeing design, operation, and incident response for Gusto's security posture, requiring substantial expertise in Cloudflare and AWS.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

As a Security Production Engineer, you'll ensure security systems' reliability, develop automation, collaborate on performance optimization, and mentor team members.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

As a Solutions Architect, engage with customers to architect cloud solutions, optimize workloads, and provide technical leadership while collaborating with engineering teams.

The Senior Application Security Engineer will implement security controls for space systems, ensuring compliance with government standards while collaborating with engineering teams to enhance security practices and respond to threats.

As a Senior Cloud Security Engineer, you will implement security controls for multi-cloud environments, develop security tooling, and collaborate on cloud architecture.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Design, implement, and support enterprise physical security systems (video surveillance, access control, sensors, IoT). Consult with clients, develop technical architectures, configure and test systems, troubleshoot hardware/software, manage projects, run design workshops, and support sales and delivery. Travel 25-50% and perform hands-on installations and network-integrated solutions.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Embedded senior security engineer owning end-to-end security for v0: proactively find and fix vulnerabilities, build security features (sandboxing, isolation, permission boundaries), review launches, manage HackerOne reports, refine threat models, harden code execution, and respond to v0-specific incidents while shipping product features alongside the team.