Top Cybersecurity Jobs in San Francisco, CA

Lead design and implementation of API and cloud security for FedNow: automate security tooling, integrate DevSecOps checks in CI/CD, perform security testing, configure API gateway policies, monitor and respond to incidents, conduct threat modeling and architecture reviews, and communicate risks to technical and leadership audiences.

The Senior Threat Operations Specialist investigates harmful content, responds to time-sensitive escalations, identifies abuse strategies, and collaborates across teams for user safety, focusing on child exploitation and threats.

Lead the architecture and execution of a large-scale CIAM platform migration and consolidation. Own customer identity operations, authentication flows, integrations, microservices, mobile login experiences, observability, resilience, and identity-related incident response. Partner with product, marketing, customer care, and business teams to manage the identity roadmap, analyze fraud and conversion metrics, optimize customer support, and communicate platform health and migration progress.

Supports complex IBM Z security conversions and migrations by analyzing customer environments, executing conversions, troubleshooting failures, and maintaining conversion tooling. Requires extensive mainframe and Enterprise Security Manager expertise, including RACF, ACF2, or Top Secret, z/OS, REXX, JCL, and related tools. The role collaborates with customers and technical teams, develops and maintains utilities, analyzes access controls, and applies secure development and source-control practices.

Develop and architect IAM security software, automation frameworks, APIs, and microservices. Integrate security into CI/CD and cloud-native environments, conduct code reviews and threat modeling, monitor security events, support incident response, and advise teams on identity architecture and best practices.

Develop and architect security-focused IAM software, automation frameworks, APIs, and microservices. Integrate security into CI/CD and cloud-native environments, conduct code reviews and threat modeling, monitor security events, and support incident response. Serve as an internal identity strategy subject matter expert while collaborating with infrastructure, application, security, and audit teams. The role requires extensive IAM administration experience, advanced programming skills, cloud and containerization expertise, and strong knowledge of authentication, authorization, encryption, and secure coding.

Owns GitLab’s Secret Detection offering and Vulnerability Research function as products. Defines strategy across the secret lifecycle, improves detection precision and coverage, manages rules and intelligence pipelines, and guides AI-enabled triage and remediation. Partners with engineering, security research, threat intelligence, field, and internal security teams while owning adoption, retention, competitive win rate, packaging, pricing, and revenue outcomes.

Develop and maintain expertise in global medical device cybersecurity regulations, standards, and conformity assessment requirements. Monitor regulatory changes, conduct complex research, produce regulatory intelligence content, and advise customers on compliance and market access. Deliver training, reports, impact assessments, and strategic insights across global regions. Mentor team members, support business development and customized knowledge services, and contribute to emerging areas including AI, data governance, connected health, and software as a medical device.

Owns GitLab’s Secret Detection offering and Vulnerability Research function. Defines strategy across secret prevention, detection, validation, revocation, reporting, and detection-content quality. Partners with engineering, security research, threat intelligence, field, and security teams while driving adoption, retention, revenue, packaging, pricing, and competitive outcomes. The role requires technical understanding of scanners and detection logic, commercial judgment, AI-enabled workflows, and clear asynchronous communication.

Perform on-site ICS/OT inventories at CONUS/OCONUS DoD facilities, create detailed network/topology and dataflow diagrams, assess OT hardware/software and RMF/cybersecurity compliance, make remediation recommendations, and support planning, logistics, and reporting with government stakeholders.