Top Cyber Security Jobs in San Francisco Bay Area, CA

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate automated infrastructure security capabilities across multi-cloud environments. Harden Linux hosts and containers, develop security controls with Terraform and production code, manage Kubernetes and cloud security platforms, implement monitoring and threat detection, and lead initiatives from threat modeling through reliable production deployment.

Leads security engineering architecture and strategy, including IAM, SSO, authentication, authorization, observability, and distributed event-based systems. Drives build-versus-buy decisions, improves security microservices and tooling, establishes engineering standards, and secures agentic AI infrastructure. Collaborates cross-functionally on priorities and tradeoffs while mentoring engineers, documenting practices, evaluating technologies, and advancing security across a cloud-based microservice architecture.

Leads security engineering implementations for identity management, authorization, observability, and microservice security. The role improves security services, frameworks, tooling, and standards; configures Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP; partners with product and engineering teams; and drives reliable, scalable security solutions across the organization.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Design and build high-scale distributed systems for securing AI agents and endpoints. Develop backend services, LLM integrations, tool-calling frameworks, MCP integrations, RAG pipelines, and enterprise applications. Lead architecture, code reviews, troubleshooting, performance improvements, and full software development lifecycle activities. Collaborate with product, UX, security, and infrastructure teams while mentoring engineers and improving development practices.

Own Sable’s security program across cloud infrastructure, browser environments, credentials, secrets, and customer data. Establish data-handling and access-control standards, maintain ISO 27001, ISO 42001, and SOC 2 controls, threat-model emerging AI surfaces, manage vulnerabilities, and build detection, logging, and incident-response systems. Lead customer security discussions and develop preventative guardrails for engineering, including protections for multi-tenant systems, sandboxed browser use, prompt injection, and data exfiltration.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Designs and operates controlled cyber-capability evaluations for frontier AI models and agentic systems. Builds vulnerable applications, cyber ranges, exploit-development targets, and evaluation harnesses; runs experiments; collects telemetry; analyzes model behavior and evaluation artifacts; and documents security findings. The role also develops sandboxing, containment, access, and secrets-management controls while collaborating with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Secure LiteLLM’s Python application, cloud infrastructure, CI/CD pipeline, and software releases. Responsibilities include vulnerability remediation, pull request and architecture reviews, GitHub Actions hardening, secrets detection, credential management, release signing, IAM and workload identity improvements, security guardrails, documentation, and ownership of product and pipeline security initiatives.

Leads enterprise network and cybersecurity architecture across corporate and manufacturing environments. Manages network and security engineers, vendors, infrastructure operations, cloud networking, segmentation, firewalls, monitoring, incident response, vulnerability remediation, compliance controls, and technology roadmaps. Designs resilient AWS and hybrid connectivity, oversees routing, switching, wireless, OT/IT security, and presents risk and strategy to stakeholders.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Own the architecture, security, reliability, observability, and scalability of AWS infrastructure supporting a Medicaid EHR platform. Design secure networking, IAM, encryption, monitoring, disaster recovery, vulnerability remediation, and audit readiness. Improve Azure DevOps CI/CD pipelines with safer releases and security gates, mature infrastructure-as-code practices, and partner with engineering on production architecture and operational decisions.

Leads the company’s security function through hands-on engineering and security team leadership. Responsibilities include building security tooling, strengthening secure development and vulnerability management, designing security architecture for automated and AI-driven systems, managing privacy and compliance risks, owning audit attestations, partnering on customer security matters, and leading incident response and detection improvements.

Leads Salesforce’s product security engineering strategy, security governance, risk remediation, and cloud security architecture across customer-facing products and platforms. Partners with engineering and executive leadership to embed security controls into software development, manage technical security debt, and reduce systemic risk. Builds and scales inclusive security organizations while communicating security posture to executives, board members, customers, analysts, and auditors.

Design and build AI-powered cybersecurity platforms that ingest and normalize massive security telemetry, correlate events, predict threats, and generate explainable findings. Develop Python backend services, distributed storage systems, and AIDevOps pipelines for rapid experimentation. Integrate foundation models, agentic systems, RAG, embeddings, and graph-based models into analyst workflows. Collaborate with product teams, security experts, and engineers to deliver scalable, trusted threat detection and automation capabilities.

Supports cybersecurity architecture, system and network administration, security operations, and mission-critical government environments. Responsibilities include managing security tools, developing secure configurations and architectures, conducting threat and impact analyses, documenting procedures, automating operations, reviewing compliance with government standards, and mentoring teammates. The role requires experience with Forescout, DLP, SIEM, malware detection, WAF, IDPS, Windows and Linux systems, networking, scripting, and enterprise security operations.

Lead customer onboarding for a cybersecurity platform by integrating identity, endpoint, cloud, SaaS, and network data sources; configuring Microsoft security services; building automation workflows; preparing technical documentation and compliance evidence; and coordinating with customers, SOC, engineering, and compliance teams through go-live.

Leads security solution strategy and technical engagements for global enterprise customers. Advises technical decision-makers, drives secure cloud adoption, designs architectures, leads demonstrations and proof-of-concepts, coaches technical sellers, and develops solution roadmaps. Partners with account teams, product and engineering groups, and external partners to deliver integrated Microsoft security solutions across cloud, hybrid, and on-premises environments.

Lead technical pre-sales engagements for cybersecurity, cloud, compliance, and AI solutions. Deliver presentations, demonstrations, workshops, architecture sessions, and production-ready pilots. Design solutions involving XDR, zero trust, cloud security, Microsoft Purview, data protection, governance, privacy, and regulatory compliance. Coordinate internal and external partners, resolve technical and competitive blockers, influence strategy, and guide implementation across Microsoft and non-Microsoft environments.

Designs, deploys, and maintains enterprise security platforms for vulnerability management, patching, endpoint management, and privileged access. Engineers asset discovery, remediation workflows, access controls, automation, monitoring, and integrations across infrastructure and cloud workloads. Troubleshoots platform outages, agents, operating systems, networks, certificates, credentials, APIs, and production services. The role also owns incident response, root cause analysis, upgrades, backup validation, runbooks, and support handoff.

Leads consulting projects involving Cisco network security and enterprise networking solutions. Designs, implements, migrates, troubleshoots, and integrates Secure Access, SD-WAN, firewalls, identity platforms, XDR, and related technologies. Authors technical designs and migration plans, manages workstream delivery, risks, documentation, testing, and client relationships. Supports presales, estimates, statements of work, vendor engagement, mentoring, certifications, and solution development. Requires strong Cisco security expertise and up to 50% client travel.