Top Cyber Security Jobs in San Francisco Bay Area, CA

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Lead Toast’s product and platform security organization, overseeing security platform engineering, application and cloud security, secure development practices, offensive security, vulnerability management, hardware security, and developer enablement. Partner with product and engineering leaders to establish secure defaults and scalable guardrails while reducing developer friction. Manage and grow a multi-team security engineering organization, expand security champions and tooling adoption, and align security posture with business and product priorities.

Lead DigitalOcean’s AI security strategy, governance framework, roadmap, and organizational programs. Build and operationalize AI/ML security controls, tooling, guardrails, and automation; conduct threat modeling, adversarial testing, and AI red teaming. Review AI architectures, guide high-risk product decisions, monitor deployed models, and address risks involving RAG, agents, model supply chains, and prompt injection. Represent AI security to executives and external communities while translating emerging research and threats into engineering guidance and policy.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Leads SoFi’s Offensive Security function, unifying penetration testing and red teaming. Owns strategy, staffing, tooling, metrics, vendor relationships, regulatory engagement, and execution quality. Builds AI-assisted offensive security capabilities for reconnaissance, exploit development, attack-path analysis, testing, and reporting. Personally contributes to network, application, cloud, mobile, AI, and adversary-emulation engagements while hiring, coaching, and developing the team and partnering with engineering, risk, vulnerability management, and incident response.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Build and evolve mission-critical backend infrastructure and commercialization tools for Waymo’s autonomous vehicle fleet. Collaborate with Product, Security, and engineering teams to develop secure systems, including vehicle configuration, secure parts transactions, key provisioning, and security infrastructure. Apply backend engineering, microservices, cryptography, PKI, authentication, encryption, and access-control expertise to solve business-critical problems.

Designs and scales enterprise security across IAM, corporate SaaS, endpoints, and infrastructure. Responsibilities include automating joiner-mover-leaver workflows, access reviews, zero-trust controls, SaaS security posture management, endpoint protections, vendor risk assessments, and AI-powered security automation. The role partners with IT, Legal, HR, and Compliance on security frameworks, documentation, audits, and strategic roadmap initiatives.

Perform penetration testing, threat modeling, security design reviews, and vulnerability validation across applications, APIs, infrastructure, cloud-native systems, and AI agents. Build AI-powered security automation, identify complex attack paths, and partner with engineering teams to improve security controls and eliminate vulnerability classes. Translate technical findings into actionable guidance and lead complex assessments across organizational boundaries.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation for enterprise cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Advises technical and executive stakeholders, supports complex sales cycles, develops customer documentation, leads training, and collaborates cross-functionally. Travel is typically 25–50%.

Architect and scale security services, detection systems, and response frameworks across Uber’s global ecosystem. Lead threat analysis, incident investigations, root cause analysis, and security automation using Python, Go, or Ruby. Establish detection, monitoring, alerting, and documentation standards; guide cross-functional security and privacy initiatives; make engineering and risk tradeoffs; and apply AI/ML techniques to improve cyber defense capabilities.

Designs and leads enterprise cybersecurity architecture across network, cloud, endpoint, identity, and data environments. Develops security strategies, governance frameworks, and controls; conducts risk assessments, vulnerability management, penetration testing, and incident response. Oversees security tool integration, regulatory compliance, third-party risk, and secure development practices. Provides technical leadership, mentoring, and cross-functional guidance to protect business-critical systems and minimize cyber risk.

Own infrastructure security foundations, improve cloud security across IAM, networking, and systems, and strengthen authentication, authorization, identities, and secrets management. Build production security tooling and automation to prevent vulnerabilities, detect configuration drift, and reduce manual work. Partner with infrastructure and product engineers on secure design reviews, vulnerability remediation, centralized logging, and detection and response capabilities.

Lead identity and access security across a global portfolio, including authentication, authorization, non-human identities, PAM, JIT access, and Cloudflare ZTNA. Design Okta policies, integrate endpoint and SaaS security signals, manage identity governance and compliance, and automate security workflows using infrastructure-as-code, scripting, and AI tooling. Influence cross-functional teams, modernize access controls, and drive complex security initiatives to completion.

Leads the architecture and implementation of Uber’s cyber defense platform across multi-cloud and hybrid environments. Defines security strategy, builds scalable CSPM, vulnerability management, threat detection, and incident response capabilities, and applies AI/ML automation. Provides incident leadership, establishes security standards, mentors engineers, drives technical direction, and collaborates with executive and cross-functional teams on security, privacy, compliance, and engineering initiatives.

Deploy and operate Strix’s autonomous penetration-testing platform in customer environments, validate and triage vulnerabilities, communicate security impact to technical and executive audiences, advise customers, and provide field feedback to improve the product and AI agents.

Build and scale Petra’s AI-powered cybersecurity detection platform, including real-time signal ingestion, behavioral analysis, and AI-driven decisioning. Architect distributed systems for rapid growth, improve production reliability and correctness, and serve as a senior technical voice on a small, autonomous engineering team. The role requires experience with scalable data-intensive systems and deploying machine-learning models in production.

Work directly with major customers to identify account-compromise pain points, improve product experiences, deploy new offerings, and rapidly build product enhancements. Serve as the customer’s primary contact and internal advocate while partnering with the founding team. Translate customer feedback into incremental and longer-term platform improvements using Node, TypeScript, React, and Python in a fast-paced, autonomous environment.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Designs, implements, and maintains secure network infrastructure for Lightning AI’s production and AI environments. Responsibilities include firewall, VPN, IDS/IPS, segmentation, vulnerability assessment, penetration testing, SIEM monitoring, incident response, compliance documentation, access controls, and security automation. The role partners with infrastructure and engineering teams to mitigate threats and optimize security controls.