Top Senior Cyber Security Jobs in San Francisco Bay Area, CA

Lead hardware and embedded security across device design, manufacturing, deployment, updates, and decommissioning. Develop security baselines, conduct architecture reviews and threat modeling, define requirements, validate controls, and drive remediation with hardware engineering teams. Focus areas include secure boot, firmware, FOTA, hardware root of trust, device identity, provisioning, cloud-connected devices, and secure-by-default engineering practices.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Leads a multi-team organization building AI-driven cybersecurity systems for endpoint and cloud environments. Owns technical strategy, roadmap, hiring, delivery, evaluation, and safe production deployment of AI models and autonomous defense agents. Oversees systems operating under strict endpoint resource limits and at cloud scale across trillions of events. Partners with engineering, product, threat intelligence, and executives while advancing security efficacy, reliability, and responsible AI adoption.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation for cybersecurity, identity, exposure management, and risk solutions. Advises enterprise security and executive stakeholders, explains platform integrations with network environments, develops technical documentation, delivers training, and supports complex sales cycles, events, and competitive evaluations. Travel is typically 25–50%.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Build and scale Fieldguide’s security function across secure software design, identity and secrets management, cloud and Kubernetes security, and agentic AI security. Partner with engineering and product teams to identify risks, develop secure frameworks, harden cloud controls, enforce AI-agent permissions and tenant isolation, and promote secure development through design reviews and coaching.

Leads security engineering implementations for identity management, authorization, observability, and microservice security. The role improves security services, frameworks, tooling, and standards; configures Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP; partners with product and engineering teams; and drives reliable, scalable security solutions across the organization.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Build and maintain security across the MeshMesh platform, including threat modeling, security reviews, vulnerability scanning, monitoring, remediation, system hardening, compliance support, and continuous control validation. The role partners with engineering teams to secure cloud-based distributed systems, application and infrastructure environments, and AI-assisted development workflows, including agent loops and tool use.

Lead system security engineering for autonomous vehicle platforms, defining security requirements, interfaces, threat models, risk analyses, trade studies, and verification plans. Integrate hardware security, secure boot, cryptography, key management, and secure communications across vehicle compute, sensors, networks, and cloud telemetry. Partner with hardware, embedded software, safety, validation, suppliers, and Tier-1 organizations to align cybersecurity with functional safety and regulatory requirements.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Conduct red team and adversary emulation operations across cloud, corporate, production, applications, infrastructure, and AI systems. Perform advanced web, API, cloud, Kubernetes, CI/CD, identity, and secrets security testing; identify attack paths and realistic business impact; collaborate with security and engineering teams on remediation; conduct purple team exercises; and build automation, tooling, and continuous security checks.

Develop backend security products and large-scale web applications primarily in Go. Responsibilities include writing robust code, code reviews, documentation, performance optimization, collaboration across technical teams, and participation in on-call support. The role requires knowledge of HTTP and networking protocols, Linux, automation, shell scripting, and backend systems, with preferred experience in security solutions, Kubernetes, and hybrid cloud environments.

Own company-wide data security and access controls in Palantir Foundry. Design groups, roles, row- and column-level policies, masking, redaction, identity provisioning, and audit processes. Partner with IT, Security, and infrastructure teams on Okta, SSO, SCIM, network egress, credentials, and AI-agent access. Administer Foundry, maintain parity with source systems, advise teams on sensitive-data use, and lead cross-functional data governance standards.

Administer and troubleshoot enterprise network security platforms, including firewalls, URL filtering, IDS/IPS, 802.1X NAC, VPN, and TLS inspection. Handle security tickets, policy changes, certificate renewals, documentation, and scoped segmentation projects. Support formal change management and collaborate across security, IT, product, and operations teams while meeting SLA and project milestones.

Provides technical leadership for enterprise security architecture, platforms, and controls across endpoints, infrastructure, applications, and cloud environments. Responsibilities include developing security strategy and roadmaps; implementing endpoint, EDR, zero-trust, application, and infrastructure protections; building scalable security services and automated workflows; and partnering across engineering teams to improve security posture, resilience, and operational excellence.

Leads Fastly’s Platform Security organization, defining multi-year technical strategy and roadmaps for foundational infrastructure, secrets, identity, PKI, and trust services. Manages engineering teams and principal-level contributors, drives reliability and security best practices across the organization, establishes metrics and accountability, and communicates strategy and risk to executives. Requires deep experience with distributed systems, infrastructure as code, Linux, cloud and on-premises environments, and security technologies. Coding is not expected, but strong technical expertise is essential.

Lead and mature Plenful’s company-wide security program across application, cloud, infrastructure, security operations, incident response, compliance, and customer trust. Manage a small team, establish security roadmaps and controls, partner with engineers on vulnerability remediation and secure development, strengthen AWS and AI/ML security, oversee SOC 2, HIPAA, and HITRUST initiatives, and communicate security risks to executives, customers, auditors, and cross-functional stakeholders.

Own security assessment and risk management for AI, LLM, Claude, MCP, and agentic systems. Define security controls, access governance, monitoring frameworks, standards, and training. Partner with AI Enablement and engineering teams on threat modeling, architecture reviews, and secure deployment. Build AI security monitoring tools, investigate risks such as prompt injection and data leakage, and track emerging attack vectors, defenses, and regulations.

Build and maintain scalable security platforms, automation, APIs, detections, and internal tooling for a cloud-native SaaS environment. Secure AI applications, LLM services, identities, SaaS platforms, cloud infrastructure, and APIs. Develop controls against prompt injection, data leakage, model misuse, and excessive permissions while supporting vulnerability management, incident response, threat modeling, and security operations.

Designs, deploys, and secures AI agents for enterprise risk and security operations. The role manages AI governance, Microsoft security and compliance controls, data protection, DLP, insider risk, access controls, monitoring, incident response, and SIEM/XDR integrations. It also leads security architecture, automation, AI risk evaluation, cross-functional initiatives, and mentoring while supporting secure adoption of Microsoft Copilot and Azure AI platforms.

Lead offensive security assessments, penetration testing, threat modeling, and attack-surface analysis across internet-facing services, APIs, embedded systems, firmware, and device interfaces. Identify vulnerabilities, guide remediation, validate fixes, and shape secure product-development practices. The role also drives risk-reduction initiatives, security architecture reviews, offensive security methodology, and strategic communication with engineering and executive stakeholders.