Top Cybersecurity Jobs in San Francisco, CA

Supports vulnerability assessments, prioritization, remediation tracking, application and infrastructure security reviews, regulatory compliance, audit activities, and security reporting. Maintains vulnerability-management tools, scripts, documentation, and processes while collaborating with engineering teams, system owners, vendors, and stakeholders. Requires application security knowledge, vulnerability assessment experience, coding skills, secure development lifecycle familiarity, and understanding of CVE, CVSS, OWASP, cloud, and modern development practices.

Own vulnerability management across applications, infrastructure, containers, Kubernetes, and third-party dependencies. Assess and prioritize findings, investigate dependency origins, recommend remediation, maintain vulnerability-management tools, integrate security platforms, develop dashboards, identify false positives, and lead remediation initiatives with engineering and infrastructure teams.

Leads first-line-of-defense business controls for Technology and Cybersecurity across multiple domestic and international entities. Advises the CTO, CISO, and senior leaders; manages IT risk and controls teams; owns RCSA, control testing, risk reporting, issue remediation, audits, and regulatory exams. Oversees enterprise programs including Insider Threats, End User Computing, AI Governance, and IT Asset Management, aligning them with NIST, COBIT, FFIEC, and OCC requirements.

Design and build backend services for a digital asset custody platform: transaction orchestration, wallet lifecycle, custody integrations, resilient APIs, event-driven processing, observability, and cryptographic security controls to protect customer assets.

Build and operate ML-driven security and anomaly detection systems end-to-end: feature engineering, model training, validation, deployment, and monitoring over large-scale security telemetry. Partner with SOC, threat intelligence, and fraud teams to tune detections, close feedback loops, establish model governance, and document runbooks. Mentor engineers and contribute to platform standards, incident reviews, and detection automation.