Top Cyber Security Jobs in San Francisco Bay Area, CA

Lead DigitalOcean’s AI security strategy, governance framework, roadmap, and organizational programs. Build and operationalize AI/ML security controls, tooling, guardrails, and automation; conduct threat modeling, adversarial testing, and AI red teaming. Review AI architectures, guide high-risk product decisions, monitor deployed models, and address risks involving RAG, agents, model supply chains, and prompt injection. Represent AI security to executives and external communities while translating emerging research and threats into engineering guidance and policy.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

Leads SoFi’s Offensive Security function, unifying penetration testing and red teaming. Owns strategy, staffing, tooling, metrics, vendor relationships, regulatory engagement, and execution quality. Builds AI-assisted offensive security capabilities for reconnaissance, exploit development, attack-path analysis, testing, and reporting. Personally contributes to network, application, cloud, mobile, AI, and adversary-emulation engagements while hiring, coaching, and developing the team and partnering with engineering, risk, vulnerability management, and incident response.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation for enterprise cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Advises technical and executive stakeholders, supports complex sales cycles, develops customer documentation, leads training, and collaborates cross-functionally. Travel is typically 25–50%.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Senior hands-on engineer responsible for hybrid infrastructure operations and IT security. Maintains Windows, macOS, Linux, cloud, networking, virtualization, identity, endpoint, and security environments; investigates incidents, vulnerabilities, and alerts; supports incident response, access management, audits, and compliance; and develops automation and documentation. The role requires troubleshooting across complex systems, improving security controls and operational processes, and collaborating with IT teams, stakeholders, vendors, and managed service providers. The position is temporary and requires working onsite in San Francisco four days per week.

Own product security across robots, embedded systems, firmware, cloud infrastructure, APIs, mobile applications, and fleet operations. Lead threat modeling, secure architecture reviews, vulnerability research, penetration testing, code review, incident response, detection engineering, and security tooling. Establish security standards, automate testing, investigate incidents, and partner closely with engineering teams to harden systems and ship secure fixes.

Lead and grow a security engineering team as a technical player-coach; implement security tooling and automation across corporate, infrastructure, and application layers; define data-driven security strategy, OKRs, and KPIs; manage compliance with frameworks (SOC2, CIS, GDPR); lead incident response and threat modeling; govern AI/ML security risk; and drive security culture and cross-functional education.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Own and strengthen security across systems, networks, and infrastructure. Design firewalls and IDS/IPS capabilities, conduct security audits and vulnerability assessments, detect and respond to threats, establish organization-wide security practices, collaborate with engineering and operations, and support customer security questionnaires and technical requirements.

Own the company’s security engineering program across AWS infrastructure, Kubernetes, application security, vulnerability management, penetration testing, bug bounty operations, and compliance support. Harden cloud and application environments, identify and remediate security gaps, partner with engineers on secure designs and code fixes, and improve monitoring, incident readiness, secrets management, and defense in depth.

Lead the company’s security engineering function as its first dedicated security hire. Define security architecture across the LLM pipeline, cloud infrastructure, and product; improve tenant isolation and data residency; conduct threat modeling, penetration testing, vulnerability remediation, and security operations; and support audits and enterprise security reviews. The role reports to the CTO and may eventually grow into team leadership.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Build identity verification and fraud detection systems that analyze candidate data, correlate risk signals, and identify fraudulent or state-sponsored activity. Develop high-availability data pipelines and real-time guardrails for security teams. Prototype and scale fraud detection solutions, collaborate with security, platform, and data teams, write technical designs, debug production systems, and participate in software development lifecycle practices.

Develop backend systems for large-scale web applications and security products primarily in Go. Write robust, modular code, optimize performance, participate in code reviews and documentation, and collaborate across technical and product teams. The role requires strong HTTP and networking knowledge, Linux, automation, shell scripting, and backend operations experience. Engineers participate in core US business hours and an on-call rotation, with occasional travel as needed.

Senior Security Engineer responsible for application, cloud, and platform security across an enterprise SaaS environment. The role involves building security automation and agents, integrating risk-based reviews into development, conducting threat modeling and code reviews, improving detection and observability, remediating systemic risks, and supporting compliance initiatives. The engineer will partner closely with development teams and help secure AI-powered features, cloud infrastructure, APIs, and deployment mechanisms.

Own Petual’s security strategy, architecture, roadmap, and daily security program. Partner with engineering on application, cloud, infrastructure, and AI security; advance vulnerability management, incident response, access governance, and detection; lead enterprise security reviews; and evolve compliance programs for regulated industries and new frameworks.

Define and improve the security and privacy program; secure cloud infrastructure, applications, internal systems, and AI agent workflows; manage identity, access, secrets, and privileged controls; lead SOC 2 Type II compliance and customer security reviews; oversee penetration testing and remediation; and protect sensitive data across API, voice, and SMS systems.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.