Top Senior Cyber Security Jobs in San Francisco Bay Area, CA

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Own product security across robots, embedded systems, firmware, cloud infrastructure, APIs, mobile applications, and fleet operations. Lead threat modeling, secure architecture reviews, vulnerability research, penetration testing, code review, incident response, detection engineering, and security tooling. Establish security standards, automate testing, investigate incidents, and partner closely with engineering teams to harden systems and ship secure fixes.

Designs and implements scalable trust and identity infrastructure, including secrets management, PKI, authentication, and access control services. The role defines architecture, leads technically complex initiatives, improves engineering standards and reliability, and partners across Product, Security, Compliance, and Engineering. It requires strong systems engineering experience with Linux, networking, distributed systems, modern programming languages, and infrastructure tooling. Occasional on-call nights and weekends may be required.

Leads end-to-end development of security data pipelines, APIs, services, and endpoint protection platforms. Architects scalable, reliable, and hardened cloud security infrastructure; creates design documentation, monitoring, alerting, and vulnerability defenses. Collaborates with security, infrastructure, and engineering teams, supports on-call operations, mentors engineers, and communicates technical strategies to executives and customers. The role also develops automated systems for threat intelligence, security reporting, and intrusion prevention across public and private cloud environments.

Design and develop security frameworks for Aurora’s autonomous vehicle platform and cloud services. Lead vehicle security implementation, architecture reviews, threat modeling, code reviews, security releases, and integration with partner teams and OEMs. Write production-quality C++ and Golang, mentor engineers, translate requirements into products, and apply cryptographic, infrastructure, network, embedded, and hardware security practices.

Leads SoFi’s Offensive Security function, unifying penetration testing and red teaming. Owns strategy, staffing, tooling, metrics, vendor relationships, regulatory engagement, and execution quality. Builds AI-assisted offensive security capabilities for reconnaissance, exploit development, attack-path analysis, testing, and reporting. Personally contributes to network, application, cloud, mobile, AI, and adversary-emulation engagements while hiring, coaching, and developing the team and partnering with engineering, risk, vulnerability management, and incident response.

Own security across application, cloud, and network layers. Conduct threat assessments and design reviews, build product protections, author security documentation, coordinate testing and compliance, manage customer security reviews, and lead incident preparedness and response. Maintain cloud access audits, automate security checks in deployment pipelines, and establish policies for secrets, outbound data, and device management. The role requires hands-on security engineering, coding, risk communication, and independent work in an on-site startup environment.

Establish and operate the company-wide security and privacy program, covering cloud and infrastructure protection, access controls, data protection, application security, audit readiness, AI-agent guardrails, customer security reviews, penetration testing, and third-party risk assessment.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Design, implement, and scale enterprise security architecture across identity, endpoints, network, SaaS, and AI systems. Lead zero-trust transformation, automate security workflows, build AI-augmented detection and response tooling, perform risk assessments and threat modeling, and mentor junior engineers while partnering cross-functionally to improve telemetry, monitoring, and incident response.

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Provides security architecture and advisory guidance for large-scale cloud infrastructure and foundational services. Conducts threat modeling, security design reviews, risk assessments, and vulnerability mitigation throughout the software development lifecycle. Partners with engineering and product teams to implement secure designs, prioritize risk-based initiatives, and improve security roadmaps. Applies expertise in cloud security, identity and access management, network security, secure development practices, and infrastructure protection while influencing stakeholders without direct authority.

Designs, deploys, troubleshoots, and supports enterprise network and security infrastructure, including routing, switching, firewalls, wireless, cloud networking, VPNs, and data center services. The role analyzes operational incidents, implements remediation, maintains documentation, communicates with management, supports roadmap decisions, and participates in on-call rotations. It requires extensive experience with multi-vendor network security technologies, cloud platforms, and customer-facing technical work.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Lead enterprise network segmentation projects using Guardicore Micro Segmentation across data center and cloud environments. Responsibilities include architecture design, project planning, installation, integration, configuration, policy deployment, documentation, customization, training, optimization, and troubleshooting. The role partners with customers, Support, and Engineering teams to deliver successful implementations and improve post-sales satisfaction.

Designs and integrates secure information systems, cloud, and defense architectures; leads federal NIST RMF and ATO processes; implements security controls; performs vulnerability, threat, and risk assessments; advises engineering and program teams; and manages continuous monitoring, compliance, audit, and patch-management activities.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Designs, builds, automates, and operates security capabilities across Azure, GCP, and on-premises environments. Responsibilities include Python automation, AI/LLM security workflows, infrastructure as code, cloud and network security, threat modeling, vulnerability remediation, security tool integration, documentation, troubleshooting, incident improvement, and on-call support. The role owns security services through production, collaborates across engineering teams, and mentors peers.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.