Top Cybersecurity Jobs in San Francisco, CA

Leads complex insider risk investigations across on-premises, cloud, and endpoint systems. Performs technical analysis, develops evidence-based findings, maintains evidentiary integrity, and coordinates responses with security, HR, legal, and compliance teams. Contributes to detection logic, investigative triggers, playbooks, and signal quality improvements. Requires advanced analytical and forensic capabilities, cybersecurity experience, and an active U.S. Government Top Secret clearance.

Build AI-infused cybersecurity software and cloud services with customers, from discovery and architecture through production deployment, operations, and handoff. Develop secure agents, automation, integrations, and developer tooling; apply threat modeling, identity, authorization, privacy, and safe AI controls. Lead ambiguous technical workstreams, collaborate with customer and Microsoft engineering teams, evaluate and monitor AI systems, and convert engagement insights into reusable components, reference architectures, and product improvements.

Leads hands-on penetration testing across applications, cloud, networks, hardware, and operational technology. Identifies vulnerabilities, conducts adversary emulation, develops attack paths, improves detection, and communicates risks and remediation plans to technical and executive audiences. Provides strategic direction, mentors security teams, coordinates remediation, researches emerging threats, and applies AI and automation to scale testing.

Drive cross-functional engineering and operational programs for Microsoft's CyberShield red team. Partner with security engineers, red team operators, platform teams, customers, and leadership to develop scalable infrastructure, tooling, and AI-driven offensive security capabilities. Own technical requirements, plans, milestones, dependencies, risks, OKRs, metrics, customer feedback, and executive communications while translating red team tradecraft into measurable engineering and security outcomes.

Investigate and resolve complex customer security incidents, including threat detection, incident triage, malware and log analysis, containment, root-cause investigation, and security response coordination. Develop incident-response runbooks, analyze endpoint, server, and network environments, collaborate with security and threat-intelligence teams, support Microsoft security technologies, maintain threat-landscape expertise, and participate in on-call rotations while providing empathetic customer engagement.

Leads Windows security assurance across compliance, risk assessment, vulnerability research, security tooling, and scalable security controls. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, coordinates cross-team initiatives, and drives end-to-end security improvements. Requires expertise in cybersecurity, threat modeling, vulnerability discovery, security research, and Windows architecture, plus people-management experience.

Lead architecture and hands-on implementation of Microsoft's AI Safety Platform, building large-scale observability, monitoring, detection, investigation, and threat-hunting systems. Develop distributed data pipelines, correlate telemetry, apply AI security research, and support attack reconstruction and anomaly detection. Partner across engineering, research, security, and privacy teams; conduct architecture reviews, write production code, review designs, mentor engineers, and influence technical direction across teams.

Drive enterprise security solution sales for Microsoft Cloud customers. Manage client relationships, identify and close security opportunities, understand business and technology priorities, develop value propositions, coordinate technical and business resources, forecast sales, perform competitive analysis, and provide cybersecurity expertise to decision-makers.

Design, implement, test, and maintain cloud-scale services for security-critical, regulated environments. Build security, compliance, and reliability features, respond to incidents, participate in on-call rotations, apply secure-by-design practices, and collaborate with cross-functional teams to ensure operational excellence.

Leads complex, cross-organizational cybersecurity programs from strategy and problem definition through execution, adoption, and measurable outcomes. Establishes governance, roadmaps, operating mechanisms, automated workflows, and success measures. Aligns engineering, security, operations, risk, compliance, and executive stakeholders; manages dependencies, risks, tradeoffs, and competing priorities. Uses AI, telemetry, and data-driven insights to improve decisions and delivery, while communicating program status, recommendations, and risks to senior leadership.