Top Cyber Security Jobs in San Francisco Bay Area, CA

Lead end-to-end security architecture for digital asset and cryptocurrency platforms, including custody, staking, trading, settlement, wallets, and treasury operations. Design MPC, threshold cryptography, multi-signature, HSM/KMS, Zero Trust, and cloud-native security solutions. Lead threat modeling, smart contract assessments, security automation, regulatory alignment, incident response, and architecture reviews while mentoring engineers and partnering with executive, legal, risk, and compliance teams.

Security Engineering Intern responsible for completing a scoped security project, developing automation and investigation tools, researching vulnerabilities, analyzing findings, validating AI-assisted outputs, collaborating with engineers, and documenting and demonstrating solutions. The role requires programming, web and systems knowledge, foundational security understanding, AI familiarity, and current enrollment in a bachelor’s or master’s program.

Leads end-to-end delivery of AI security solutions for enterprise public-sector customers. Deploys and optimizes Zscaler AI Guard, AI Protect, and SPLX across cloud and Kubernetes environments; designs networking and firewall connectivity; performs automated AI red-teaming, vulnerability probing, and lab replication. Acts as a trusted technical advisor, produces documentation and demos, advocates customer needs, and supports product development. Requires expertise in LLMs, cloud networking, APIs, containers, and security, plus U.S. citizenship, clearance eligibility, and travel up to 40%.

Lead infrastructure security and DevSecOps strategy across AWS environments. Implement cloud security controls for identity, networking, encryption, secrets, logging, IaC, CI/CD, containers, and software supply chains. Partner with AppSec and InfoSec on testing, audits, vulnerability prioritization, incident response, remediation, and risk management. This player-coach role also develops the security practice, influences cross-functional teams, and may hire and manage engineers.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Leads enterprise data protection and AI security strategy, architecture, and execution. Builds and manages security engineering teams; oversees Microsoft Purview classification, labeling, DLP, endpoint protection, insider risk, and DSPM. Defines security controls for generative AI, LLMs, agents, and AI-enabled SaaS; guides AI governance and vendor assessments. Partners with Security Operations and Incident Response to address data exfiltration, insider threats, and AI-related incidents while meeting regulatory and contractual obligations.

Lead hardware and embedded security across device design, manufacturing, deployment, updates, and decommissioning. Develop security baselines, conduct architecture reviews and threat modeling, define requirements, validate controls, and drive remediation with hardware engineering teams. Focus areas include secure boot, firmware, FOTA, hardware root of trust, device identity, provisioning, cloud-connected devices, and secure-by-default engineering practices.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation for cybersecurity, identity, exposure management, and risk solutions. Advises enterprise security and executive stakeholders, explains platform integrations with network environments, develops technical documentation, delivers training, and supports complex sales cycles, events, and competitive evaluations. Travel is typically 25–50%.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Own infrastructure security for globally distributed systems, lead the security team, harden cloud-native infrastructure, build internal security tooling, improve telemetry and threat detection, and remediate vulnerabilities. The role partners closely with engineering teams and will expand into securing AI infrastructure, including training clusters, GPU fleets, model artifacts, and inference endpoints.

Build identity verification and fraud detection systems that analyze candidate data, correlate risk signals, and identify fraudulent or state-sponsored activity. Develop high-availability data pipelines and real-time guardrails for security teams. Prototype and scale fraud detection solutions, collaborate with security, platform, and data teams, write technical designs, debug production systems, and participate in software development lifecycle practices.

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Own security across Ironsite’s wearable devices, firmware, jobsite networks, cloud, ML systems, customer platform, and AI agents. Responsibilities include software supply-chain security, SBOM management, vulnerability and incident response, device identity and encryption, privacy enforcement, zero-trust networking, cloud and application security, infrastructure-as-code guardrails, detection, and agent security. The role protects sensitive worker video and critical infrastructure data while building scalable, automated security systems.

Design, implement, and scale enterprise security architecture across identity, endpoints, network, SaaS, and AI systems. Lead zero-trust transformation, automate security workflows, build AI-augmented detection and response tooling, perform risk assessments and threat modeling, and mentor junior engineers while partnering cross-functionally to improve telemetry, monitoring, and incident response.

Lead cybersecurity evaluation and environment development, including roadmap planning, production coding, security research, expert reviewer management, and collaboration with frontier AI labs. The role requires deep offensive security expertise, strong community connections, and the ability to assess vulnerabilities, fairness, and task quality while helping sell cybersecurity environments to research organizations.

Secure Outset’s AWS infrastructure, Terraform code, application architecture, and product code. Responsibilities include security reviews, penetration-test coordination, vulnerability remediation, incident investigation, SIEM detection engineering, alert response, telemetry improvement, security automation, cloud hardening, IAM, secrets management, and collaboration with engineering and SRE teams. The role leads technical platform investigations during security and privacy incidents and develops practical controls that protect systems without slowing product delivery.

Lead security integration for acquired companies by conducting infrastructure and security gap assessments, creating risk-based integration plans, modeling threats with STRIDE, prioritizing remediation, and aligning businesses with Salesforce security frameworks. The role requires expertise in cloud security, application and supply-chain security, zero-trust architecture, secrets management, secure build pipelines, code signing, data classification, and compliance controls. It also involves partnering empathetically with newly acquired organizations and improving M&A security workflows and automation.

Build and scale Fieldguide’s security function across secure software design, identity and secrets management, cloud and Kubernetes security, and agentic AI security. Partner with engineering and product teams to identify risks, develop secure frameworks, harden cloud controls, enforce AI-agent permissions and tenant isolation, and promote secure development through design reviews and coaching.

Lead cloud, infrastructure, vulnerability management, application security, and Secure SDLC teams. Own remediation SLAs, security roadmaps, compliance evidence, scanning programs, secure development enablement, and risk acceptance. Partner with engineering, compliance, incident response, and platform teams to secure GCP, AWS, Azure, Kubernetes, containers, SaaS, and application code. Hire and develop security engineers, improve security posture metrics, drive vulnerability fixes, and support audit and incident follow-up activities.