Top Cyber Security Jobs in San Francisco Bay Area, CA

Leads enterprise cybersecurity strategy, architecture, risk management, compliance, incident response, vulnerability management, IAM, cloud and application security, and DevSecOps implementation. The role coordinates audits and penetration testing, embeds security into CI/CD pipelines, guides secure cloud architecture, and mentors security engineers and analysts while partnering with engineering, DevOps, product, compliance, and executive teams.

Provides network security engineering support for network transformation and operations. Designs, deploys, configures, and troubleshoots routing, switching, firewalls, wireless, cloud, data center, and enterprise security environments. Leads incident remediation, documents operational procedures, supports roadmap development, communicates with management and stakeholders, and participates in on-call rotations. Requires extensive networking and security experience, customer-facing expertise, cloud knowledge, and familiarity with major networking and security platforms.

Lead the architecture, development, security, integration, modernization, and technical governance of enterprise Salesforce platforms. Design data models, APIs, identity and access controls, automation, reporting, and cloud integrations. Support migrations, testing, deployments, CI/CD, DevSecOps, security assessments, and remediation. Establish standards, mentor technical teams, and collaborate with business, cybersecurity, infrastructure, and government stakeholders.

Design and maintain enterprise cybersecurity architectures, frameworks, standards, and controls across infrastructure, cloud, applications, data, and networks. Provide security guidance, conduct architecture reviews and threat assessments, evaluate risks and emerging technologies, support compliance and audits, and partner with business and technology teams to integrate security into solutions. Serve as a technical subject matter expert on cybersecurity architecture and risk management.

Audit and harden Injective’s Cosmos-SDK chain, EVM contracts, integrations, and cross-chain components. Responsibilities include threat modeling, vulnerability remediation, security tooling, fuzzing, invariant testing, static analysis, monitoring, upgrade reviews, incident response, and security reporting. The role requires strong Go and/or Solidity skills, blockchain and DeFi expertise, cryptography knowledge, and experience auditing blockchain or DeFi protocols.

Design, review, and verify security for Cisco network devices across hardware, firmware, and software. Develop threat models, conduct architecture and code reviews, identify root weaknesses, create reusable security controls, and test implementations with reproducible evidence. Assess embedded and IoT device security using C/C++ review, Python tooling, CWE, MITRE EMB3D, and OWASP IoT frameworks. Collaborate globally with engineering teams, mentor others, prioritize risks, and potentially develop AI-enabled workflows, static-analysis rules, secure wrappers, and CI/CD guardrails.

Leads hands-on cybersecurity and DevSecOps engineering for VA cloud platforms. Responsibilities include remediating vulnerabilities and NIST control deficiencies, securing AWS infrastructure and CI/CD pipelines, implementing automated security gates, managing secrets and configurations, improving monitoring, and supporting RMF evidence and incident response. The role provides technical security leadership, collaborates across engineering and security teams, and participates in a 24/7 on-call rotation.

Provides security architecture and advisory guidance for large-scale cloud and infrastructure initiatives. Conducts threat modeling, security design reviews, risk assessments, and vulnerability mitigation across application and infrastructure stacks. Partners with engineering and product teams to implement secure designs, improve secure development processes, and prioritize risk-based security initiatives. The role requires expertise in cloud security, identity and access management, networking, encryption, and security communication, with preferred experience in offensive security, Kubernetes, code analysis, and infrastructure security tooling.

Build and maintain security across the MeshMesh platform, including threat modeling, security reviews, vulnerability scanning, monitoring, remediation, system hardening, compliance support, and continuous control validation. The role partners with engineering teams to secure cloud-based distributed systems, application and infrastructure environments, and AI-assisted development workflows, including agent loops and tool use.

Designs, deploys, and operates security platforms across endpoints, cloud, identity, email, privileged access, and GitHub. Administers CrowdStrike, SIEM, PAM, Mimecast, AWS, Microsoft 365, and GitHub security controls; develops detections, automation, and SOAR workflows; investigates threats; secures cloud and CI/CD environments; and supports vulnerability management, incident response, audits, documentation, and on-call operations in a regulated environment.

Operate and optimize exposure management, vulnerability management, RBVM, CAASM, and CNAPP platforms. Configure scanners, asset inventories, risk prioritization, integrations, dashboards, remediation workflows, and cloud security monitoring. Automate security operations using scripts, APIs, and Axonius capabilities while coordinating remediation with client engineering teams. Support vulnerability lifecycle management, compliance scanning, reporting, platform tuning, client meetings, and operational documentation.

Own the technical sales lifecycle for API, agent, and AI security solutions. Lead customer discovery, solution design, demonstrations, workshops, and technical engagements. Advise customers on security strategies, threat mitigation, posture management, and cloud-native architectures. Serve as a cybersecurity subject matter expert, translate complex concepts for technical and executive audiences, gather requirements, and collaborate with sales, product, engineering, and partners to deliver successful security transformations.

Design, build, and own security-focused modules for Walrus’s B2B payment verification platform, including payments, reputation, and authentication capabilities. Write and maintain production code while emphasizing bug prevention, testability, maintainability, data-driven product decisions, and thoughtful software design. Collaborate closely with an early-stage team to establish engineering standards, development practices, and a supportive workplace culture.

Designs and governs enterprise security architectures across applications, infrastructure, networks, endpoints, cloud environments, and sensitive data. Develops security standards, reference architectures, and secure design patterns; performs threat modeling and architecture reviews; defines security requirements; guides DevSecOps, cloud, infrastructure, and application teams; and supports security technology selection. The role requires federal security framework expertise, Zero Trust and identity architecture experience, and the ability to obtain Public Trust clearance.

Leads cybersecurity for water and wastewater OT infrastructure, including network security design, penetration testing, vulnerability audits, policy development, incident and disaster recovery planning, and security assessments. Manages project execution, mentors cybersecurity professionals, develops training, supports client relationships and business development, and oversees security deliverables for complex infrastructure projects.

Designs, deploys, maintains, and improves enterprise cybersecurity infrastructure across network, application, cloud, and on-premises environments. Responsibilities include operating firewalls and defensive platforms, managing SASE/ZTNA and SD-WAN implementations, conducting vulnerability and threat analysis, supporting incident response, maintaining secure baselines, automating operational tasks, integrating intrusion detection telemetry, collaborating with SOC and network teams, and contributing to security architecture and roadmap decisions.

Designs, deploys, and improves information security solutions. Responsibilities include vulnerability scanning, penetration testing, risk assessments, network and system monitoring, incident investigation and response, firewall and encryption implementation, security control assessments, compliance reviews, policy development, technical documentation, and staff security guidance.

Designs, implements, and operationalizes AI security and GenAI data protection controls across enterprise AI usage. Engineers AI Gateway policies, detection logic, monitoring, coaching, redaction, quarantine, and blocking capabilities. Integrates telemetry with SIEM, SOAR, ITSM, identity, and data protection platforms. Assesses risks involving AI agents, MCP, APIs, non-human identities, and third-party integrations while improving control effectiveness, documenting standards, supporting audits, and partnering with technical and business teams.

Designs, builds, and operates cloud-native DFIR tooling, automation, integrations, data pipelines, CI/CD infrastructure, and engagement environments. Maintains security controls, observability, patching, vulnerability management, and operational reliability. Participates in incident response, on-call support, post-incident reviews, documentation, and collaboration with IT, DevOps, product, and detection engineering teams.

Implements, migrates, supports, and provides design assistance for enterprise network security solutions. The role serves as a technical SME for firewall platforms, performs network assessments, executes complex firewall and SD-WAN migrations, troubleshoots hybrid environments, develops technical documentation, and leads client-facing technical discussions. It also provides mentorship, knowledge transfer, and project collaboration across on-premises and cloud networking environments.

Conduct red team and adversary emulation operations across cloud, corporate, production, applications, infrastructure, and AI systems. Perform advanced web, API, cloud, Kubernetes, CI/CD, identity, and secrets security testing; identify attack paths and realistic business impact; collaborate with security and engineering teams on remediation; conduct purple team exercises; and build automation, tooling, and continuous security checks.

Develop backend security products and large-scale web applications primarily in Go. Responsibilities include writing robust code, code reviews, documentation, performance optimization, collaboration across technical teams, and participation in on-call support. The role requires knowledge of HTTP and networking protocols, Linux, automation, shell scripting, and backend systems, with preferred experience in security solutions, Kubernetes, and hybrid cloud environments.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Build AI-driven systems for blockchain security, including smart contract analysis, vulnerability discovery, exploit analysis, threat detection, and security investigations. Develop AI agents that reason over codebases, protocol interactions, transactions, and wallet activity. Collaborate with security researchers and infrastructure teams on monitoring and incident response while researching blockchain attack techniques, Web3 infrastructure, and AI security trends.