Top Tech Jobs & Startup Jobs in San Francisco Bay Area, CA

Leads North American detection engineering and threat hunting operations, translating global strategy into regional roadmaps, scaling distributed technical teams, managing hiring and budgets, coordinating with Product and Engineering, and directing incident response during major security events. The role owns detection efficacy, performance metrics, cross-region collaboration, and the hunt-to-detect feedback loop while mentoring senior practitioners and advocating for security tooling and telemetry.

Lead internal security incident response as the primary SOC escalation point. Responsibilities include incident triage and validation, tabletop and purple-team exercises, telemetry optimization, threat coverage improvements, post-incident reviews, remediation tracking, stakeholder reporting, and maintaining response playbooks and standards. The role partners with engineering, product security, detection engineering, and offensive security teams to improve organizational resilience.

Own the vision, roadmap, and delivery of internal SOC tooling, including analyst UX, response workflows, investigation models, and automation. Partner with SOC leadership, engineering, design, and product teams to transform manual processes into scalable workflows. Define requirements, interfaces, operational metrics, and investment cases while improving analyst throughput, time-to-close, and delivery repeatability. The role requires deep SOC operations knowledge, cybersecurity product management experience, and expertise building operator-facing platforms and AI-enabled products.

As a Staff Product Manager, you'll drive the strategy and success of SIEM products, collaborating with various teams to fulfill customer needs and market demands while focusing on security for SMBs.

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

Lead design, development, and delivery of mission-critical SIEM platform features. Define technical vision, own quality and uptime, mentor engineers, collaborate cross-functionally, build AI-assisted workflows, and drive performance, monitoring, and architecture decisions.

Lead technical design and implementation of the ISPM product using Ruby on Rails. Build scalable data pipelines and systems to process large-scale identity telemetry, collaborate with security researchers and product teams, mentor engineers, and set architectural direction for detection and remediation features.

Build and lead development of the ESPM platform using Ruby on Rails. Define technical vision, design scalable data pipelines and architectures for petabyte-scale ingestion, implement features across the stack, collaborate with security researchers, mentor engineers, and ensure high-quality, tested deliveries.