Top Cybersecurity Jobs in San Francisco, CA

Customer-facing role that architects and drives security transformation on Microsoft Azure and Microsoft 365. Responsibilities include designing secure architectures (Zero Trust), implementing and evaluating Microsoft security solutions (Defender for Cloud, Sentinel, M365 Defender, AAD, Intune), running design sessions, troubleshooting implementations, and influencing product and engineering teams to improve customer security posture and adoption.

Designs and operates offensive cyber-capability evaluations for frontier AI models and agentic systems. Builds cyber ranges, vulnerable applications, exploit-development targets, evaluation harnesses, telemetry, scoring, and containment controls. Executes controlled experiments, analyzes model behavior and evaluation artifacts, documents findings, and collaborates with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Defines and executes enterprise security strategy, roadmaps, governance, and mitigation initiatives. Leads large-scale security and architecture reviews, threat modeling, risk assessments, and remediation across products and platforms. Influences engineering, security, product, operations, and business stakeholders without direct authority; establishes secure practices, baselines, playbooks, and measurable outcomes. Applies analytics, automation, and AI to improve security review quality and risk detection while mentoring security professionals.

Serves as Microsoft's chief CJIS authority, interpreting CJIS policy across cloud products, advising legal, compliance, engineering, and field teams, leading audits and agency engagements, shaping policy, and maintaining CJIS agreements, control mappings, documentation, and readiness programs. The role requires extensive CJIS expertise, cloud compliance knowledge, stakeholder influence, U.S. citizenship, background screening, and travel to government agencies and industry events.

Lead Windows security assurance across compliance, risk assessment, security requirements, threat modeling, vulnerability research, and security tooling. Partner with engineering and product teams to implement scalable controls, coordinate security initiatives, manage reviews, align priorities, and deliver measurable risk-reduction outcomes. The role requires influencing cross-functional stakeholders, navigating ambiguity, and improving security processes throughout the product lifecycle.

Design, implement, test, and maintain cloud-scale services for security-critical, regulated environments. Build security, compliance, and reliability features, respond to incidents, participate in on-call rotations, apply secure-by-design practices, and collaborate with cross-functional teams to ensure operational excellence.

Design, implement, and maintain high-scale, multi-tenant secure services. Collaborate with cross-functional teams, build automation and resilient components, support live services (including Azure air-gapped regions), participate in on-call rotations, and ensure service reliability and security.

Lead cross-organizational privacy and data-governance programs for Microsoft Security. Define governance for collection, use, sharing, retention, and protection of security data. Advise on AI data uses (model training, anonymization, differential privacy), develop standards, playbooks, and approval processes, identify systemic risks, and drive technical and stakeholder-aligned resolutions for complex privacy decisions.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner cross-functionally to translate requirements into scalable controls, and drive operational excellence, hiring, and stakeholder communication.

Define and drive identity and security operations strategy at the intersection of Identity and AI. Assess risks, threat-model roadmaps, build SOC/SIEM-ready detection frameworks for AI-enabled and machine identity workloads, identify capability gaps, incubate new security approaches, and influence engineering and security teams to implement scalable security capabilities.