Top Cybersecurity Jobs in San Francisco, CA

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Engineering, Product, Legal, Finance, and related teams. Translate abuse trends into prioritized requirements, business cases, defense measures, and measurable outcomes. Support AI-driven fraud detection, payment fraud controls, account verification, incident escalation, and risk reporting. Drive initiatives to completion without direct authority while balancing fraud prevention with legitimate-user experience.

Designs and operates secure endpoint and SaaS controls across GitLab’s remote workforce, emphasizing macOS. Responsibilities include endpoint hardening, Terraform and GitOps automation, security baselines, patching, software distribution, endpoint telemetry, detection improvements, and auditable change management across macOS, iOS, Windows, and Linux. The role partners with IT and security teams, mentors engineers, and serves as a senior escalation point for complex endpoint security issues.

Lead customer-facing security assurance for enterprise customers by addressing security, privacy, compliance, contract, questionnaire, RFP, and risk assessment requirements. Review and negotiate security clauses, advise Sales, Legal, Product, Procurement, and Engineering, develop security content and enablement materials, maintain Trust Center resources, support regulatory readiness, guide strategic initiatives, and mentor Security Assurance team members.

Owns GitLab’s Secret Detection offering and Vulnerability Research function. Sets strategy across prevention, detection, validation, revocation, and reporting; manages detection rules, advisories, intelligence feeds, and quality metrics; drives adoption, retention, competitive wins, and revenue. Partners with engineering, security research, threat intelligence, sales, and internal security teams while evaluating AI applications for triage, rule generation, remediation, and review automation.

Senior Backend Engineer on GitLab’s Code Security team, building dependency analysis, SBOM and manifest parsers, vulnerability analyzers, AI-driven detection tooling, and automated dependency remediation. The role includes evaluation harnesses, security report integration, performance improvements, technical ownership, mentoring, documentation, code review, cross-functional collaboration, and on-call support. Engineers work primarily with Go and Rust, plus Ruby and Python, in a remote asynchronous environment.

Leads architecture and technical direction for GitLab’s static analysis engine and SAST capabilities. Designs program-modeling systems, detection pipelines, evaluation harnesses, and guardrails for AI-generated code. Owns high-scope initiatives, mentors engineers, improves quality and performance, evaluates vulnerability detection against benchmarks, and collaborates across security and product teams. Requires deep systems programming, program analysis, application security, AI tooling, and architectural leadership experience.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, reviews, exceptions, attestations, and retirement. Translates emerging regulations and security frameworks into actionable requirements, maintains framework mappings, measures adherence, supports audits and customer trust activities, and drives remediation. The role also implements automation and AI-assisted governance workflows, provides technical and program leadership across Security, Product, Legal, and Engineering, mentors teammates, and shapes the security governance roadmap.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, security assessments, and findings. Maintain risk registers and executive reporting, manage AI risk assessments supporting ISO 42001 certification, develop key risk indicators, and automate GRC workflows using scripting and AI. Partner with Security, Engineering, IT, Product, Legal, Procurement, and Audit teams to translate technical risks into business impacts and drive issues to closure.

Lead product security architecture for strategic initiatives, identify and remediate systemic risks, threat model systems, define reusable security standards, build prototypes, conduct architecture reviews, and guide engineering teams. The role focuses on application security, distributed systems, supply chain security, AI coding workflows, and proactive risk reduction while mentoring security engineers and influencing technical direction.

Lead secure enterprise architecture and GitLab Professional Services implementations across AMER. Assess risks, design cloud and DevSecOps solutions, advise on deployment models, and migrate legacy CI/CD and application security tools. Support security scoping, statements of work, and pre-sales planning while coordinating cross-functional delivery. Mentor consultants, develop enablement materials, and advise customers on compliance frameworks, threat modeling, security scanning, zero trust, supply chain security, and AI/LLM risks.