Top Tech Jobs & Startup Jobs in San Francisco Bay Area, CA

Build and maintain enterprise web applications, APIs, and containerized microservices using Python and Django. Develop workflow engines, financial validation logic, relational database schemas, asynchronous integrations, role-based access controls, and CI/CD automation. Support complementary applications across multiple technology stacks while maintaining secure, auditable, and reliable systems.

Performs incident response and digital forensics across enterprise and cloud environments. Responsibilities include real-time incident management, malware and memory analysis, evidence preservation, network and filesystem analysis, technical reporting, threat hunting, detection-rule development, security monitoring enhancement, customer assessments, tabletop exercises, and lessons learned. The role also maintains forensic laboratories, develops security procedures, supports SOC leadership, and participates in rotating on-call coverage.

The Business Analyst gathers and documents requirements, analyzes business processes and data, develops functional specifications and business cases, and recommends improvements. The role facilitates stakeholder workshops, collaborates with developers and project managers, supports project planning and reporting, conducts user acceptance testing, creates training materials, and helps ensure information systems meet business, accessibility, security, and compliance needs.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Providers. Reviews cloud architectures, authorization packages, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests. Leads architecture interviews, identifies technical and documentation gaps, advises government stakeholders on risk and compliance, supports continuous monitoring, and guides vendors on FedRAMP, NIST, FISMA, RMF, and agency requirements.

Owns and governs cybersecurity systems architecture across cloud-native AWS GovCloud environments. Designs Zero Trust solutions, security controls, integration patterns, architecture blueprints, and engineering design documents. Leads integration of SIEM, SOAR, CDM, TDSP, EDR, identity platforms, and DevSecOps pipelines. Oversees cloud architecture, modernization, technical roadmaps, governance reviews, and collaboration with engineering and business stakeholders while ensuring compliance with federal security standards and FedRAMP requirements.

Leads cybersecurity GRC programs for government clients, overseeing contractor teams, task orders, project deliverables, compliance, security assessments, RMF sustainment, risk mitigation, schedules, budgets, SLAs, and performance metrics. The role requires technical program management, customer and stakeholder engagement, executive presentations, requirements gathering, reporting, and support for information security solutions across networks, systems, and applications.

Designs, implements, and maintains enterprise security solutions; operates EDR, SIEM, web application firewall, and vulnerability-scanning tools; advances Zero Trust maturity; integrates security into DevSecOps, CI/CD, and infrastructure-as-code processes; addresses vulnerabilities and security gaps; develops security performance dashboards; and validates system designs against requirements.