Top Senior Security Engineer Jobs in San Francisco, CA

Designs and governs enterprise Zero-Trust security architecture across on-premises, clinic, and cloud environments. Leads IAM, endpoint protection, EDR, patching, network segmentation, security policy development, risk and vulnerability assessments, incident response, SOC coordination, and compliance with NIST and HIPAA. Mentors team members and liaises with external vendors and auditors.

Own application and infrastructure security across an AWS environment: threat-model systems, review designs and code, manage IAM and least-privilege access (including AI agents), establish durable security controls, integrate security into CI/CD and developer tooling, and partner with Adyen's security organization.

Build and maintain scalable security platforms, automation, and tooling to protect data across SaaS, cloud, endpoints, collaboration tools, AI systems, and data warehouses. Develop data discovery, classification, governance, DLP, DSPM/SSPM, insider-risk, and access controls; leverage AI and automation to improve detection, prevention, and incident workflows while partnering with cross-functional teams.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead cloud and infrastructure security and detection engineering: deploy SIEM, author MITRE-mapped detections, build cloud security posture and IaC gates, own incident response playbooks and SOC 2 Type II operational evidence, and drive vulnerability remediation and security reporting.

Lead design and implementation of security architecture and controls across Macroscope’s distributed systems. Protect customer data, harden production, embed secure-by-default practices, and partner with engineering to improve IAM, cloud security, secrets management, CI/CD, vulnerability management, and monitoring.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Embedded senior security engineer owning end-to-end security for v0: proactively find and fix vulnerabilities, build security features (sandboxing, isolation, permission boundaries), review launches, manage HackerOne reports, refine threat models, harden code execution, and respond to v0-specific incidents while shipping product features alongside the team.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

Design, implement, and improve security controls for operational technology (OT) networks in datacenter environments. Identify and remediate risks, create inventories and risk registers, coordinate penetration testing and vulnerability mitigation, embed security into OT systems, develop recovery and response playbooks, and present technical findings to stakeholders while partnering with engineering and third parties to reduce risk.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Drive adoption of Datadog security solutions in strategic enterprise accounts. Partner with sales teams to understand customer requirements, conduct technical demonstrations, support evaluations and proof-of-value initiatives, develop proposals, and provide technical expertise throughout the sales cycle. Maintain expertise in security products, vulnerabilities, cloud platforms, SIEM, SOC workflows, endpoint security, and application security. Relay customer feedback to product and engineering teams and participate in industry events with up to 30% travel.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

Lead corporate security investigations and incident response across identity, endpoints, SaaS, email, and security platforms. Improve detection, response, Zero Trust controls, automation, and incident readiness. Conduct vendor security assessments, support customer security questionnaires, document risk decisions, and collaborate with Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success teams.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.

Design and build AI-powered cybersecurity platforms that ingest and normalize massive security telemetry, correlate events, predict threats, and generate explainable findings. Develop Python backend services, distributed storage systems, and AIDevOps pipelines for rapid experimentation. Integrate foundation models, agentic systems, RAG, embeddings, and graph-based models into analyst workflows. Collaborate with product teams, security experts, and engineers to deliver scalable, trusted threat detection and automation capabilities.

Own and implement application security across the software development lifecycle for multiple product lines. Define security controls, validation gates, standards, and guardrails; conduct architecture reviews; enhance CI/CD security; triage SAST, SCA, and penetration-testing findings; support incident response; maintain FedRAMP and CJIS compliance; and represent security practices in audits and customer engagements.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Designs, implements, and operates SASE and ZTNA architecture across GCCH and commercial environments. Owns identity-driven access controls, session management, telemetry, compliance mapping, dashboards, and audit evidence. Serves as the senior escalation point for incidents, performs root-cause analysis, integrates device posture and SOAR workflows, develops AI-enabled automations, collaborates with identity, network, compliance, and vendors, and mentors junior engineers.

Lead database engineering for a federal species-data integration program in a hybrid AWS cloud environment. Responsibilities include harmonizing schemas, documenting source-to-target mappings and lineage, enforcing metadata and data-quality standards, implementing encryption and NIST-aligned security controls, building authoritative source registries, optimizing performance, and leading production migration, validation, monitoring, and operational documentation. The role requires Databricks or equivalent lakehouse expertise, ETL programming, federal governance knowledge, and database migration leadership.

Designs and maintains cloud and application security controls across AWS and Azure. Leads IAM, network segmentation, PAM, workload protection, CI/CD, container security, incident response, threat modeling, code scanning, and penetration testing. Partners with engineering and product teams to improve security posture, secure development practices, compliance, and cyber resilience. Provides technical guidance, training, metrics, and hands-on architecture, code review, and validation support.