Top Senior Security Engineer Jobs in San Francisco, CA

Develop backend security products and large-scale web applications primarily in Go. Responsibilities include writing robust code, code reviews, documentation, performance optimization, collaboration across technical teams, and participation in on-call support. The role requires knowledge of HTTP and networking protocols, Linux, automation, shell scripting, and backend systems, with preferred experience in security solutions, Kubernetes, and hybrid cloud environments.

Own company-wide data security and access controls in Palantir Foundry. Design groups, roles, row- and column-level policies, masking, redaction, identity provisioning, and audit processes. Partner with IT, Security, and infrastructure teams on Okta, SSO, SCIM, network egress, credentials, and AI-agent access. Administer Foundry, maintain parity with source systems, advise teams on sensitive-data use, and lead cross-functional data governance standards.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Build and operate secure, reliable Azure GPU infrastructure for distributed AI training and reinforcement-learning workloads. Develop fleet-level automation, infrastructure-as-code, remediation, drift detection, and deployment tooling. Troubleshoot multi-node, multi-GPU, networking, performance, and reliability issues while translating ambiguous research needs into production solutions. Partner with engineers, researchers, and stakeholders on architecture, security, and delivery decisions, and contribute through code reviews, technical collaboration, and mentoring.

Provides technical leadership for enterprise security architecture, platforms, and controls across endpoints, infrastructure, applications, and cloud environments. Responsibilities include developing security strategy and roadmaps; implementing endpoint, EDR, zero-trust, application, and infrastructure protections; building scalable security services and automated workflows; and partnering across engineering teams to improve security posture, resilience, and operational excellence.

Develop and maintain security policies, technical standards, control frameworks, and governance-as-code requirements. Translate regulations and security risks into measurable controls, manage policy lifecycles and exceptions, and ensure traceability from regulations through implementations. Serve as a control-family subject matter expert while collaborating with security, engineering, compliance, audit, legal, and business teams. Review policy implementations and support continuous control validation across cloud, IAM, application, infrastructure, and data security domains.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Designs and scales AI-driven security GRC automation, including compliance evidence collection, control testing, risk assessment, audit preparation, and workflow integration. Builds scripts, bots, APIs, and AI/LLM solutions; integrates GRC platforms with security and IT systems; establishes quality controls and guardrails; monitors automation risk and performance; and partners with technical and business stakeholders to improve security compliance maturity.

Lead application security across the SDLC, partnering with engineering teams on secure architecture, coding, testing, deployment, and cloud services. Conduct manual web application and API testing, improve automated CI/CD security controls, establish secure coding standards, assess third-party risks, support vulnerability management and incident response, and ensure healthcare compliance. The role also develops enterprise-wide security policies and evaluates emerging security technologies.

Secure AI, machine learning, inference, and developer platforms through threat modeling, architecture and code reviews, secure API and distributed-system design, model and supply-chain security, and security automation. Build controls for authentication, authorization, isolation, rate limiting, monitoring, anomaly detection, CI/CD scanning, and protection against prompt injection, model extraction, adversarial inputs, and data leakage. Partner closely with ML, platform, infrastructure, engineering leadership, and the CISO.

Lead offensive security assessments, penetration testing, threat modeling, and attack-surface analysis across internet-facing services, APIs, embedded systems, firmware, and device interfaces. Identify vulnerabilities, guide remediation, validate fixes, and shape secure product-development practices. The role also drives risk-reduction initiatives, security architecture reviews, offensive security methodology, and strategic communication with engineering and executive stakeholders.

Leads technical security sales engagements for K-12 and community college customers through demonstrations, workshops, whiteboarding, hackathons, and proofs of concept. Designs secure cloud and hybrid architectures, resolves technical blockers, advises on Zero Trust, XDR, AI security, and compliance, and supports production deployments. Builds relationships with developers, platform leaders, partners, and customer success teams while promoting Microsoft security, cloud, and AI solutions.

Leads hypothesis-driven threat hunting, cloud vulnerability analysis, remediation, and incident response across AWS, Azure, GCP, and OCI. Administers Qualys and Tenable, analyzes SIEM and cloud telemetry, investigates threats, prioritizes vulnerabilities, remediates misconfigurations and IAM risks, develops detections and hunt playbooks, documents findings, briefs stakeholders, and mentors junior engineers.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Build, deploy, and maintain AppSec tooling; integrate security into SDLC; triage SAST/DAST findings; automate penetration testing; lead secure coding and threat modeling; support vulnerability detection, remediation, and incident response.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.

Own security across application, cloud, and network layers. Conduct threat assessments and design reviews, build product protections, author security documentation, coordinate testing and compliance, manage customer security reviews, and lead incident preparedness and response. Maintain cloud access audits, automate security checks in deployment pipelines, and establish policies for secrets, outbound data, and device management. The role requires hands-on security engineering, coding, risk communication, and independent work in an on-site startup environment.

Establish and operate the company-wide security and privacy program, covering cloud and infrastructure protection, access controls, data protection, application security, audit readiness, AI-agent guardrails, customer security reviews, penetration testing, and third-party risk assessment.

Build and maintain scalable security observability, detection, and response systems. Develop AI- and ML-based detections, normalize large-scale security logs, automate incident workflows, respond to alerts and threats, conduct investigations and threat hunts, and participate in detection and response on-call rotations.

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Provides organization-wide technical leadership for AWS cloud infrastructure and security architecture supporting a connected-home energy platform. Designs scalable infrastructure, infrastructure-as-code standards, security controls, identity and access management, threat modeling, observability, and cost optimization. Partners with SRE and product engineering teams on reliability, secure coding, technical strategy, tooling evaluations, and mentorship. The role requires hands-on expertise in cloud platforms, distributed systems, security engineering, containers, CI/CD, and modern observability.

Build and operate security controls, telemetry, detections, and enforcement for NVIDIA’s large-scale EDA compute, storage, and networking infrastructure across on-premises and multi-cloud environments. Investigate threats, respond to incidents, automate secure configurations and compliance evidence, threat-model infrastructure, and manage security technology lifecycles. The role requires hands-on Linux, networking, programming, infrastructure security, and collaboration with infrastructure and security teams.

Builds secure AI and agentic cybersecurity tooling, transforming research prototypes into production-ready services. Responsibilities include developing backend services, APIs, CLI tools, automation, and integration patterns; defining MVPs for ambiguous security and identity challenges; collaborating across research, product, enterprise security, and platform teams; and applying offensive security and adversarial thinking to address AI-specific risks such as injection, tool misuse, unauthorized access, data exfiltration, and unsafe delegation.

Investigate, assess, and remediate vulnerabilities across NVIDIA data center platforms. Responsibilities include vulnerability triage, exploitability analysis, CVSS and CWE assessment, security fixes, regression testing, dependency updates, automation, and coordinated disclosure. The role also improves secure development lifecycle practices through threat modeling, security reviews, testing, and security automation while collaborating across distributed engineering teams.