Top Cybersecurity Jobs in San Francisco, CA

Design and build backend services for a digital asset custody platform, implementing secure transaction orchestration, wallet lifecycle management, integrations with custody providers, resilient APIs, event-driven processing, observability, and cryptographic controls to protect customer assets.

Lead design and implementation of scalable vulnerability management systems across apps, cloud, containers, supply chain, and hardware. Build automation for detection, enrichment, prioritization, routing, and remediation. Serve as senior incident responder for critical vulnerabilities, develop risk-based prioritization, produce metrics and audit-ready reporting, mentor engineers, and integrate tooling into CI/CD and platform workflows.

Design, build, and operationalize ML-driven security and anomaly detection across large-scale telemetry. Own feature engineering, model lifecycle, evaluation, drift monitoring, SOC collaboration, incident reviews, and mentor engineers while delivering low-noise, measurable detections.

Lead enterprise efforts to assess and modernize cryptographic posture with emphasis on post-quantum readiness and crypto-agility. Build and maintain a cryptographic inventory, provide technical guidance on TLS/PKI/HSM/KMS and key lifecycle, review architectures, define standards, and drive cross-functional execution and remediation.

Lead and mature SoFi's vulnerability management program: set strategy, prioritize remediation, build operating rhythms, drive cross-functional remediation campaigns, define KPIs/KRIs, improve reporting and accountability, and close gaps across detection-to-remediation workflows.

Design and own cross-product fraud strategy and decisioning across onboarding, funding, money movement, and product activity. Build device-forensics, entity-resolution, and risk-tiered money-movement frameworks. Create shared analytics/feature layers in SQL/Python, partner with ops, product, and InfoSec to deploy rules, monitor performance, and govern escalations.

Lead login and authentication fraud strategy across web and mobile: design rules, tune thresholds, perform device forensics and behavioral analysis, respond to perimeter threats, and translate threat intelligence into scalable production policy.