Top Cybersecurity Jobs in San Francisco, CA

Lead secure enterprise architecture and GitLab Professional Services implementations across AMER. Assess risks, design cloud and DevSecOps solutions, advise on deployment models, and migrate legacy CI/CD and application security tools. Support security scoping, statements of work, and pre-sales planning while coordinating cross-functional delivery. Mentor consultants, develop enablement materials, and advise customers on compliance frameworks, threat modeling, security scanning, zero trust, supply chain security, and AI/LLM risks.

Design and operate GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Build fine-grained permissions for tokens, roles, users, and AI agents; secure GraphQL and REST APIs; refactor policy code; improve performance and reliability; and lead feature-flagged rollouts and migrations. Collaborate asynchronously with authentication, platform, AI, and modular-service teams while documenting technical decisions.

Supports the Public Sector Compliance team by developing GRC strategies, managing FedRAMP and other certification processes, leading audits and assessments, maintaining compliance documentation, automating control testing through compliance-as-code, monitoring regulatory changes, and advising customers, internal teams, and senior stakeholders on cybersecurity compliance.

Lead corporate endpoint security architecture, primarily for macOS, across GitLab’s remote environment. Design automated endpoint deployment, hardening, patching, software distribution, and lifecycle management using Terraform, GitOps, and CI/CD workflows. Establish security baselines across macOS, iOS, Windows, and Linux; improve telemetry, detection, response, auditability, and compliance; reduce manual risk through policy-driven controls; and mentor engineers while serving as a senior escalation point for complex endpoint security issues.

Leads GitLab’s Security Posture Management team within Product Security. Responsibilities include governing security capability rollouts, establishing secure configuration baselines, improving software supply chain security, managing third-party components and dependencies, reducing systemic risk, maintaining risk metrics and dashboards, supporting audit evidence, informing product roadmaps, representing security practices externally, and hiring, coaching, and developing the team.

Owns GitLab’s Secret Detection offering and Vulnerability Research function. Sets strategy across prevention, detection, validation, revocation, and reporting; manages detection rules, advisories, intelligence feeds, and quality metrics; drives adoption, retention, competitive wins, and revenue. Partners with engineering, security research, threat intelligence, sales, and internal security teams while evaluating AI applications for triage, rule generation, remediation, and review automation.