Top Tech Jobs & Startup Jobs in San Francisco Bay Area, CA

Leads threat actor communications and ransomware negotiations, advising clients, legal counsel, and insurers during digital extortion incidents. Conducts threat intelligence collection and analysis, supports digital forensics and incident response investigations, develops persona operations, and produces technical and executive-facing deliverables. The role also improves intelligence workflows through automation, scripting, and tool integration, contributes to cybercrime research, and participates in an emergency on-call rotation.

Part-time remote cybersecurity internship supporting presales, client engagement, technical writing, labs, certifications, and vendor solution research. Interns shadow consultants, build networking and security skills, practice explaining technical concepts, and gain exposure to SIEM, vulnerability scanning, endpoint security, cloud, and CTF platforms. The role requires foundational cybersecurity knowledge, self-directed learning, communication skills, and availability for 20–29 hours weekly during Central Time business hours. It may lead to full-time employment near Tulsa, Oklahoma.

Participate in a paid, part-time cybersecurity internship involving technical development, security response, collaborative projects, shadowing, vendor training, and certifications. Complete in-house training while working with cybersecurity experts. Interns must be U.S.-based, available primarily during weekday EST hours, attend mandatory Tampa onboarding, provide a personal computer and reliable internet, and demonstrate foundational IT, networking, operating systems, and information security knowledge.

Supports Account Executives and senior engineers in qualifying, positioning, and solutioning Application Security and AI security opportunities. The role involves customer discovery, explaining security risks and architectural tradeoffs, demonstrating solutions, developing proposals and Statements of Work, researching emerging technologies, and participating in sales events. It focuses on DevSecOps, secure SDLC, AppSec, AI security, AI governance, and related technologies, with up to 25% travel.

Supports evaluation and governance of agentic AI harnesses by defining benchmarks, running structured evaluations, analyzing telemetry, identifying failure modes, tuning prompts and models, and maintaining audit-ready governance processes. The intern will collaborate with AI and AppSec teams, document methodologies, and participate in limited client-facing engagements under mentorship. This is a part-time, remote, 12-week paid internship requiring 25–29 hours weekly.

Supports multi-cloud lab infrastructure across AWS, Azure, and Google Cloud using Terraform, Ansible, and GitHub Actions. Assists with infrastructure-as-code modules, CI/CD pipelines, security tool evaluations, agentic automation, client POC engagements, technical documentation, and findings reports under mentorship. The part-time remote internship provides hands-on exposure to cloud infrastructure, DevOps, cybersecurity tooling, and AI-driven evaluation environments.

Designs, configures, and operates ServiceNow Security Operations and Vulnerability Response capabilities. Builds vulnerability lifecycle workflows, risk-based prioritization models, dashboards, and SLA monitoring. Integrates scanners and security tools such as Qualys, Tenable, Rapid7, Defender, and CrowdStrike through APIs. Uses CMDB, Discovery, and Service Mapping to improve asset context and vulnerability correlation. Supports remediation coordination, incident investigations, governance, reporting, documentation, and continuous improvement for client exposure management programs.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Implements and supports security data ingestion pipelines across applications, cloud services, infrastructure, security tools, and business systems. Develops transformations, parsing, normalization, enrichment, masking, validation, and delivery workflows. Troubleshoots data quality and pipeline issues, documents architectures and data flows, coordinates with client stakeholders, and supports SIEM, detection, investigation, observability, and automation use cases. Requires data engineering experience, scripting, query languages, integration knowledge, and strong client communication.

Leads complex digital forensics and incident response engagements, including ransomware, APT, nation-state, insider threat, host and network forensics, malware triage, cloud investigations, and threat attribution. Provides technical oversight, client leadership, methodology development, mentorship, tooling improvements, pre-sales support, and external thought leadership. Participates in on-call coverage and supports high-severity incident surges.