Top Cybersecurity Jobs in San Francisco, CA

Lead and scale EliseAI's Governance, Risk, and Compliance program across SOC 1/2, PCI, HITRUST, HIPAA and ISO. Own audit relationships and evidence collection, run vendor risk management and DDQ reviews, set compliance roadmaps and policies, partner with Legal and Security on contractual obligations, and hire and mentor the GRC team to meet regulatory and audit readiness.

Own and build scalable corporate security controls across identity, endpoints, SaaS, and workforce infrastructure. Automate detection and remediation (Python, Terraform), run macOS-first endpoint programs (MDM, EDR), secure AI tool usage, reduce SaaS risk with SSPM, support audits (SOC 2, ISO 27001), and partner on incident response and telemetry with Detection & Response.

The Senior Staff Security Engineer will lead edge and network security at Gusto, managing Cloudflare tools and network architecture, focusing on automation and policy-as-code practices while collaborating across teams.

As a Detection and Response Engineer, you will investigate security events, enhance incident response processes, and evaluate external tooling, while offering innovative technical solutions in a hybrid working environment.

Hands-on security software engineer responsible for product, application, infrastructure, and enterprise security. Perform security reviews, penetration testing, threat modeling, embed security into the SDLC, build automation and guardrails, streamline vulnerability workflows, and partner with engineering, product, and compliance teams to scale security via AI and integrations.

Automate cybersecurity and compliance controls using enterprise automation and AI tools. Design monitoring, anomaly detection, CI/CD/MLOps governance gates, and continuous control monitoring. Integrate scripts/APIs to produce auditable evidence for SOC 2, SOX, PCI DSS; support audits, manage questionnaires, track remediation, and collaborate with control owners and engineering teams.

Automate cybersecurity compliance and evidence collection using enterprise GRC and AI tools. Design and implement continuous control monitoring, integrate controls into CI/CD and MLOps pipelines, produce auditable evidence, support audits, manage control automation backlog, and collaborate with stakeholders to remediate gaps and respond to security questionnaires.

The Operations & Support Specialist manages daily tasks, addresses inquiries, resolves issues, collaborates with teams, and improves operational processes.

Own and run Privacy Incident Management end-to-end: triage incidents, lead response as Incident Commander, coordinate cross-functional remediation, maintain on-call readiness, run retrospectives and metrics, build automation and tooling, and support broader privacy initiatives to improve processes and stakeholder readiness.

Manage IT disaster recovery processes and ensure business continuity while supporting proprietary trading activities within a dynamic team culture.