Top Cybersecurity Jobs in San Francisco, CA

Design and build backend services for a digital asset custody platform: transaction orchestration, wallet lifecycle, custody integrations, resilient APIs, event-driven processing, observability, and cryptographic security controls to protect customer assets.

Build and operate ML-driven security and anomaly detection systems end-to-end: feature engineering, model training, validation, deployment, and monitoring over large-scale security telemetry. Partner with SOC, threat intelligence, and fraud teams to tune detections, close feedback loops, establish model governance, and document runbooks. Mentor engineers and contribute to platform standards, incident reviews, and detection automation.

Lead enterprise cryptography strategy focused on post-quantum readiness and crypto-agility. Build and maintain a cryptographic inventory, assess risks, define standards and guidance, review architectures, and drive cross-functional remediation and migration of keys, algorithms, certificates, and key management systems.

Lead design and implementation of scalable vulnerability management systems across cloud, containers, supply chain, and firmware. Build automation for triage, prioritization, remediation workflows, and metrics; respond to critical vulnerabilities; partner with engineering and compliance; mentor engineers and drive risk-based vulnerability reduction.

Lead and mature SoFi's Vulnerability Management program and other security initiatives by defining strategy, prioritization frameworks, KPIs, and operating rhythms; drive cross-functional remediation campaigns, stakeholder accountability, executive reporting, and continuous process/tooling improvements to reduce risk and improve mean time to remediate.

Design and own login/authentication fraud strategy across web and mobile, detecting and mitigating ATO, credential stuffing, MFA bombing, SIM swap, phishing, and bot traffic using device forensics, behavioral biometrics, network signals, and data-driven policy enforcement across product surfaces.

Lead cross-product fraud strategy across onboarding, account creation, funding, and money movement. Design device-forensics, entity-resolution, scam interception, and risk-tiered decisioning. Build shared analytics in SQL/Python, partner with product and ops to implement rules-engine policies, monitor performance, and govern cross-product risk.