Top Senior Security Engineer Jobs in San Francisco, CA

Build and scale Fieldguide’s security function across secure software design, identity and secrets management, cloud and Kubernetes security, and agentic AI security. Partner with engineering and product teams to identify risks, develop secure frameworks, harden cloud controls, enforce AI-agent permissions and tenant isolation, and promote secure development through design reviews and coaching.

Leads security engineering implementations for identity management, authorization, observability, and microservice security. The role improves security services, frameworks, tooling, and standards; configures Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP; partners with product and engineering teams; and drives reliable, scalable security solutions across the organization.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Build advanced threat detections across cloud, container, corporate, and edge environments; lead complex security investigations, threat hunts, and incident response; develop AI agents and automations for detection and triage; manage EDR, SOAR, and SIEM tools; analyze telemetry and forensic artifacts; and participate in on-call rotations.

Own detection and response across infrastructure by building log pipelines, SIEM detections, alert runbooks, response SLAs, and incident processes. Lead investigations and containment, automate identity and access monitoring, improve detection and containment times, and coordinate with engineering, customers, and vendors. The role requires building a security operations function from scratch, managing detections as code, and exercising independent judgment in a small organization.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Design and implement security foundations for autonomous software agents, including threat modeling, execution controls, scoped permissions, service isolation, identity and token management, audit systems, secure desktop releases, and security testing. The role involves writing production code, hardening software, responding to incidents, supporting customer assessments, and addressing AI-specific threats such as prompt injection and hostile tool inputs. This is a full-time, on-site senior individual contributor position in San Francisco.

Own product security for Lambda’s AI cloud infrastructure, including threat modeling, design reviews, multi-tenant isolation, code and infrastructure-as-code vulnerability remediation, security tooling, vulnerability management, enterprise security reviews, and secure engineering patterns. Partner across product engineering, data center operations, detection and response, and GRC while mentoring engineers and building Python or Go automation.

Design and build AI-powered cybersecurity platforms that ingest and normalize massive security telemetry, correlate events, predict threats, and generate explainable findings. Develop Python backend services, distributed storage systems, and AIDevOps pipelines for rapid experimentation. Integrate foundation models, agentic systems, RAG, embeddings, and graph-based models into analyst workflows. Collaborate with product teams, security experts, and engineers to deliver scalable, trusted threat detection and automation capabilities.

The Senior Application Security Engineer will strengthen Apollo’s secure software development lifecycle through application security reviews, threat modeling, code analysis, vulnerability management, penetration testing, remediation, and AppSec tooling. The role includes developing automation, securing AI-powered features, improving security observability, enabling developers, and partnering across Engineering, Product, Platform, Data, Legal, and Security teams. This senior individual contributor will own long-term AppSec goals, resolve ambiguous risks, and drive cross-functional security improvements.

Design, build, and operate MongoDB Atlas features and distributed backend systems, with a focus on encryption, compliance, customer-managed keys, and cloud security across AWS, Azure, and GCP. Lead complex technical projects and fleet-wide production rollouts, collaborate with product, design, customers, and support teams, mentor engineers, resolve production issues, and participate in on-call support.

Build and maintain security across the MeshMesh platform, including threat modeling, security reviews, vulnerability scanning, monitoring, remediation, system hardening, compliance support, and continuous control validation. The role partners with engineering teams to secure cloud-based distributed systems, application and infrastructure environments, and AI-assisted development workflows, including agent loops and tool use.

Build and operate production-grade application security services, backend systems, internal tools, developer guardrails, and CI/CD security automation. Develop scalable applications and AI security controls that detect, prevent, and mitigate threats. Partner with Product and Engineering teams to solve complex security challenges through software engineering, while applying strong architectural, testing, reliability, and collaboration skills.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.

Develop and operate detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include building detections-as-code, triaging alerts, leading incident response and forensic investigations, threat hunting, automating workflows, maintaining SIEM and security data pipelines, developing AI-enabled security tooling, and participating in on-call rotations. The role also involves threat intelligence collaboration, security engineering mentorship, and continuous improvement of detection and response systems.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Conduct red team and adversary emulation operations across cloud, corporate, production, applications, infrastructure, and AI systems. Perform advanced web, API, cloud, Kubernetes, CI/CD, identity, and secrets security testing; identify attack paths and realistic business impact; collaborate with security and engineering teams on remediation; conduct purple team exercises; and build automation, tooling, and continuous security checks.