Top Tech Jobs & Startup Jobs in San Francisco Bay Area, CA

Leads incident response consulting engagements, including triage, scoping, forensic and malware investigations, threat hunting, remediation planning, and executive communications. The role directs investigations with legal counsel, mentors junior analysts, develops security posture recommendations, produces reports and presentations, contributes industry thought leadership, and manages customer-facing response work. Candidates need incident response, computer and network forensics, reverse engineering, cloud response, team leadership, project management, and willingness to travel up to 30%.

Define and own the technical vision, product strategy, roadmap, data strategy, and AI integration for CrowdStrike’s Next-Gen SIEM and log management products. Translate customer, market, and threat intelligence into shipped capabilities; lead cross-platform integration across endpoint, cloud, identity, and exposure products; and articulate the platform consolidation narrative. Engage executives, customers, analysts, sales, engineering, and product teams while driving detection, investigation, response automation, and cybersecurity thought leadership.

Architect, build, deploy, and scale production AI agents and platforms for legal workflows. Develop secure, reliable, and cost-effective AI solutions; prototype and evaluate agents; optimize performance; redesign business processes; and collaborate with Legal, Data, Security, Privacy, and Engineering teams. Contribute to AI training, governance, responsible AI adoption, and enterprise standards while translating technical capabilities into measurable business outcomes.

Lead complex incident response engagements, conduct host and network forensics, investigate intrusions and malware, hunt advanced threats, develop remediation plans, and communicate findings to executives, regulators, legal counsel, and customers. The role also requires team leadership, project management, cloud incident response knowledge, thought leadership, and travel up to 30%.

Leads complex, high-severity cybersecurity investigations across endpoint, identity, email, network, and cloud environments. Performs forensic, malware, network, and threat analysis; develops remediation plans; investigates Microsoft 365 attacks; and improves detection and response through automation. Mentors analysts, creates training and SOP content, manages customer escalations, and represents CrowdStrike through thought leadership and external engagements.

Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.

Develop and operate CrowdStrike’s internal cloud management platform and mission-critical CI/CD pipelines. Build APIs and UIs using Go and TypeScript, improve developer productivity, integrate tooling, maintain cloud-native infrastructure, and support secure, highly available software delivery systems. Collaborate with development, infrastructure, security, and SRE teams, ensure SOC2-aware processes, and participate in on-call operations.

Leads product marketing strategy for CrowdStrike’s cloud risk and developer security portfolio. Owns positioning, launches, messaging, analyst engagement, field readiness, technical content, competitive strategy, thought leadership, and adoption. Partners with Product and CTO leaders to shape roadmap and market direction, creates technical proof for cloud and application security audiences, and uses customer, pipeline, usage, and competitive insights to improve business outcomes.

Lead product strategy, roadmap, and delivery for Falcon Complete’s internal MDR tooling, including AI-powered investigation and triage, ticketing, case management, and analyst workbench systems. Partner with security operations, analysts, engineering, and data science teams to translate workflows into product requirements, prioritize automation, improve analyst productivity and response times, define success metrics, and enhance customer outcomes.

Conduct sophisticated threat hunting, dark web monitoring, and customer-specific cyber threat intelligence operations. Serve as a trusted customer advisor, research targeted threats, validate security controls using MITRE ATT&CK, prepare intelligence reports, and deliver briefings to stakeholders ranging from SOC analysts to CISOs. Collaborate across teams to develop solutions, respond to customer requests, and improve threat hunting services.