Top Senior Security Engineer Jobs in San Francisco, CA

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Detect, investigate and respond to malware, phishing and other incidents across corporate IT. Perform digital forensics and threat hunting, design and deploy corporate security controls, alerts and workflows, secure identity providers, endpoints, networks and cloud platforms, and operate/configure security tooling to prevent and remediate incidents.

Lead detection, investigation and response to malware, phishing, and corporate incidents. Design and deploy corporate security controls, alerts, and tooling. Perform digital forensics, hunting across logs, secure identity, endpoints and networks, and remediate issues across corporate platforms.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Act as the technical presales lead for AI agent and cloud identity security across North America: scope engagements, design and run POCs and architectures across AWS/Azure/GCP, secure non-human and machine identities, create repeatable technical assets, and partner with account teams to close deals.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Lead and implement security engineering controls across the platform: identify real risks, build secure-by-default libraries and guardrails, enforce least-privilege for services protecting patient data, harden developer machines, and partner with compliance to convert requirements into effective technical controls.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.