Top Cybersecurity Jobs in San Francisco, CA

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, and legal stakeholders. Build scripts, automated workflows, runbooks, and security operations capabilities. Mentor security engineers and support insider threat initiatives using SIEM tools, cloud security practices, and forensic techniques across macOS, Windows, and Linux.

Supports vulnerability identification, assessment, prioritization, remediation, and reporting across applications and infrastructure. Conducts security reviews, assists with application security and offensive security activities, supports audits and regulatory compliance, coordinates remediation with system owners, and develops documentation and processes. The role also maintains vulnerability-management tools and uses scripting and AI tools to improve investigation and reporting efficiency.

Supports vulnerability assessments, prioritization, remediation tracking, application and infrastructure security reviews, regulatory compliance, audit activities, and security reporting. Maintains vulnerability-management tools, scripts, documentation, and processes while collaborating with engineering teams, system owners, vendors, and stakeholders. Requires application security knowledge, vulnerability assessment experience, coding skills, secure development lifecycle familiarity, and understanding of CVE, CVSS, OWASP, cloud, and modern development practices.

Own and build scalable corporate security controls across identity, endpoints, SaaS, and workforce infrastructure. Automate detection and remediation (Python, Terraform), run macOS-first endpoint programs (MDM, EDR), secure AI tool usage, reduce SaaS risk with SSPM, support audits (SOC 2, ISO 27001), and partner on incident response and telemetry with Detection & Response.

The Senior Staff Security Engineer will lead edge and network security at Gusto, managing Cloudflare tools and network architecture, focusing on automation and policy-as-code practices while collaborating across teams.

Lead and scale the Global Systems Integrator partnership strategy for ServiceNow Cyber and Risk across North America. Manage and develop a team of GSI Partner Managers, build executive relationships with major GSIs, drive joint pipeline and JGTM motions, create joint business plans, coordinate across product, sales, marketing, and enablement, and report partnership performance to executive leadership to deliver measurable revenue impact.

Lead and scale EliseAI's Governance, Risk, and Compliance program across SOC 1/2, PCI, HITRUST, HIPAA and ISO. Own audit relationships and evidence collection, run vendor risk management and DDQ reviews, set compliance roadmaps and policies, partner with Legal and Security on contractual obligations, and hire and mentor the GRC team to meet regulatory and audit readiness.

Hands-on security software engineer responsible for product, application, infrastructure, and enterprise security. Perform security reviews, penetration testing, threat modeling, embed security into the SDLC, build automation and guardrails, streamline vulnerability workflows, and partner with engineering, product, and compliance teams to scale security via AI and integrations.

Customer-facing role that architects and drives security transformation on Microsoft Azure and Microsoft 365. Responsibilities include designing secure architectures (Zero Trust), implementing and evaluating Microsoft security solutions (Defender for Cloud, Sentinel, M365 Defender, AAD, Intune), running design sessions, troubleshooting implementations, and influencing product and engineering teams to improve customer security posture and adoption.

Designs and operates offensive cyber-capability evaluations for frontier AI models and agentic systems. Builds cyber ranges, vulnerable applications, exploit-development targets, evaluation harnesses, telemetry, scoring, and containment controls. Executes controlled experiments, analyzes model behavior and evaluation artifacts, documents findings, and collaborates with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Defines and executes enterprise security strategy, roadmaps, governance, and mitigation initiatives. Leads large-scale security and architecture reviews, threat modeling, risk assessments, and remediation across products and platforms. Influences engineering, security, product, operations, and business stakeholders without direct authority; establishes secure practices, baselines, playbooks, and measurable outcomes. Applies analytics, automation, and AI to improve security review quality and risk detection while mentoring security professionals.

Lead secure enterprise architecture and GitLab Professional Services implementations across AMER. Assess risks, design cloud and DevSecOps solutions, advise on deployment models, and migrate legacy CI/CD and application security tools. Support security scoping, statements of work, and pre-sales planning while coordinating cross-functional delivery. Mentor consultants, develop enablement materials, and advise customers on compliance frameworks, threat modeling, security scanning, zero trust, supply chain security, and AI/LLM risks.