Top Cybersecurity Jobs in San Francisco, CA

Conduct security design and code reviews, penetration testing, vulnerability research, and security architecture assessments for Windows online services. Develop reusable security tools and agents, uncover attack vectors, demonstrate vulnerabilities, create mitigations, review deployments, and partner with engineering teams to improve security for products serving billions of customers.

Build safely isolated cybersecurity research scenarios by reproducing vulnerabilities and adversary techniques across cloud, on-premises, and hybrid environments. Develop multi-step attack chains, automated graders, reward signals, evidence capture, reset procedures, and attack variants to evaluate AI security agents. Validate findings through source-code review, telemetry, debugging, reverse engineering, and controlled testing while collaborating with threat researchers, AI engineers, and environment engineers.

Leads regional security solution sales by advising enterprise and public sector customers on cloud security, Zero Trust, and digital transformation. Develops sales strategies, shapes complex opportunities, builds executive relationships, leads architectural reviews, demos, proofs of concept, and pilots, and orchestrates Microsoft, partner, and technical resources. Performs ROI and TCO analysis, guides deployment planning, coaches account teams, and drives security platform adoption and business outcomes.

Principal Security Architect responsible for assessing productivity security risk, analyzing systems and telemetry, developing reusable security patterns and tooling, and partnering with engineering teams to deploy capabilities. The role prioritizes security work, communicates risk and tradeoffs to technical and nontechnical stakeholders, and creates roadmaps amid incomplete and changing information.

Lead Windows security assurance across compliance, risk assessment, security requirements, threat modeling, vulnerability research, and security tooling. Partner with engineering and product teams to implement scalable controls, coordinate security initiatives, manage reviews, align priorities, and deliver measurable risk-reduction outcomes. The role requires influencing cross-functional stakeholders, navigating ambiguity, and improving security processes throughout the product lifecycle.

Investigate attacker activity across cloud and on-prem environments, conduct threat hunts, analyze incidents, develop threat intelligence, and build prototype hunting tools. The role also recommends mitigations, notifies customers of threats, and feeds research findings into Microsoft product and tooling improvements.

Leads Microsoft Security’s AI SOC go-to-market strategy and operating model, translating Security Copilot and agentic SOC capabilities into repeatable customer adoption motions. Responsibilities include targeting, use-case selection, tenant enablement, activation, sustained usage, consumption, value realization, renewal, and expansion. The role coordinates business, technical, product, sales, field, delivery, and partner teams; analyzes customer and operational data; develops playbooks and feedback loops; and drives measurable security AI adoption without owning incident response or product engineering.

Lead deep technical security reviews, threat modeling, adversarial testing, and detection engineering. Build security tools, automation, and secure defaults. Partner with product teams to prioritize, implement, and validate risk-reduction roadmaps and scalable security patterns.

Lead design and execution of community engagement for Security field managers and ICs. Build engagement plans, manage virtual communities and forums, translate priorities into clear communications, gather and analyze feedback, define success metrics, and align corporate objectives with field execution through cross-functional collaboration and change management.

Lead and run forward-deployed security programs: convert ambiguous security needs into scoped initiatives, align with CISO governance, partner with engineering/product/architecture, build operating mechanisms (telemetry, reviews, roadmaps), apply AI/automation responsibly, measure outcomes, drive remediation and adoption across divisions.