Redwood City, CA

Cybersecurity Jobs in Redwood City, CA

4 jobs found

Include remote jobs

7d ago

Senior Software Engineer, Application Security

Box Redwood City, CA

Redwood City, CA

7d ago

$211k - $264k/yr Full time Application Security Appsec Ci/cd Cloud Platforms

Apply Now

Job Description

Box is building production-grade security capabilities that fit directly into how software is developed, tested, and delivered. In this Senior Software Engineer role focused on Application Security, you will design and deliver security automation, internal tooling, and developer guardrails that integrate with Box products and CI/CD.

This position centers on engineering security controls across the SDLC, including the systems needed to evaluate, verify, and operate protections at scale, with an emphasis on scalable software design and practical security engineering.

What you’ll do

Design, build, and operate production-grade security services, features, and internal tools that protect Box and its customers.
Engineer end-to-end applications and backend services using modern data stores, application frameworks, and scalable architectures.
Build systems and automation to detect, prevent, and mitigate security threats at scale.
Create “paved road” frameworks, libraries, and guardrails so secure development becomes seamless and standard across Box engineering.
Develop security automation and verification controls integrated into Box CI/CD pipelines.
Architect and implement AI security controls, evaluation frameworks, and automated protections across product verticals.
Work closely with Product and Engineering teams to turn complex security challenges into elegant, scalable software.

Required qualifications

4+ years of professional software development experience in languages such as Java, Python, PHP, Go, or Scala.
Proven ability to build end-to-end applications, with experience across databases, modern frameworks, and API design.
Strong software engineering fundamentals across object-oriented and functional design, system architecture, automated testing, reliability, and code quality.
A foundational understanding of security concepts and a passion for solving security problems through software engineering (deep security specialization is not required).
Ability to break down complex technical problems into clean, scalable, and maintainable systems.
Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
Bachelor’s degree in Computer Science, a related technical field, or equivalent practical experience.

Technologies you may work with

Languages/Frameworks: Java, Python, PHP, Go, Scala, Java Spring, Spring Boot
Messaging: Kafka, RabbitMQ, SQS
Cloud & Infrastructure: AWS, GCP, Azure, Terraform

Preferred skills

Experience or familiarity with distributed systems, microservices, or message queues such as Kafka, RabbitMQ, or SQS.
Experience with Java Spring / Spring Boot.
Familiarity with AWS, GCP, Azure and Infrastructure as Code such as Terraform.
Familiarity with AI/ML systems, LLMs, or AI application security.

Location: Redwood City, CA (hybrid)
Compensation: USD 211,000 - 263,500 per year

View full job page →

1mo ago

Staff Security Engineer

Delinea Redwood City, CA 🇺🇸 Remote

Redwood City, CA

1mo ago Closed

$170k - $200k/yr Full time Ai Security Application Security Cloud Platforms

This position is no longer accepting applications (closed Nov 10, 2026).

Job Description

Delinea is seeking an experienced Principal/Staff-level Product Security Engineer to lead Product Security Program strategy and execution.

Responsibilities

Provide strong leadership and serve as a security thought leader across Delinea product offerings
Assess the current product security program state and partner to define future state and multi-year roadmaps
Drive strategic security direction and influence security architecture adoption in product strategy and roadmap
Advise on secure design for Delinea products and services using product security best practices and industry trends
Conduct end-to-end security architecture reviews and leverage AI capabilities to augment team coverage
Perform threat modeling and assess/document product risks and application designs
Participate in expanding and maturing the S-SDLC program
Stay current on the threat landscape, technologies, security compliance requirements, standards, and industry trends
Develop baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD
Automate operational activities that maintain product and cloud security infrastructure
Respond to security incidents and, when appropriate, resolve or escalate
Mentor and guide Product Security team members
Implement organizational policies and standards for product and cloud security
Partner with other teams to integrate cloud security best practices
Participate in security audits, discuss application and cloud security, and support responses to customer security inquiries

Requirements

Bachelor’s degree in Computer Science, Information Security, or similar related field (or equivalent experience)
12 years of professional work experience in cybersecurity
7+ years in a Product Security role including Security Architecture, Threat Modeling, Secure Design, AppSec tooling, and related work
Strong knowledge of the current Product Security threat landscape and industry best practices
Experience performing Threat Modeling and Product Security design reviews, integrated into SSDLC processes
Experience with Cloud Security
Experience with Cryptography
Experience with Secure Design reviews and Threat Modeling
Experience with SaaS multi-tenant product architecture
Experience with REST APIs
Experience with Containers (Docker, Kubernetes, or similar)
Experience integrating security testing tools into development pipelines
Experience with defect tracking (Jira, Bugzilla, ServiceNow, or similar)
Experience with source code management (ADO, GitLab, GitHub, or similar)
Experience with application security testing tools (SAST, DAST, IAST, SCA, or similar)
Strong leadership, communication, and interpersonal skills; able to influence stakeholders at all levels
Strong analytical skills to prioritize, manage competing demands, and meet deadlines
Strong verbal and written communication skills, including explaining technical security issues in plain language

Technologies

Cloud Security
Cryptography
SaaS multi-tenant product architecture
REST APIs
Docker
Kubernetes
Jira
Bugzilla
ServiceNow
ADO
GitLab
GitHub
SAST
DAST
IAST
SCA
CI/CD
S-SDLC
SSDLC
Azure
AWS

Benefits

Competitive salaries
Meaningful bonus program
Healthcare insurance
Pension/retirement matching
Comprehensive life insurance
Employee assistance program
Time off plans
Paid company holidays
Excellent benefits

We’d Love to See

Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and Secure Design reviews
Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR)
Solid understanding of cloud security technologies including container security, serverless security, network and application security, and access management
Software engineering and/or development experience
Cybersecurity certifications (e.g., CISSP, CSSLP, CISM, or similar)
Proficiency with Azure and AWS

Location and Compensation

Location: Redwood City, CA (remote)
Salary: USD 170,000 - 200,000 per year

Company Context

Core focus on protecting human and machine identities
Emphasis on smart, self-motivated, collaborative people and meaningful work

Core Values

Spirited
Trust
Respect
Ownership
Nimble
Global

View full job page →

1mo ago

Senior Director - IT Infrastructure and Cybersecurity

Codexis Inc Redwood City, CA

Redwood City, CA

1mo ago Closed

$270k - $290k/yr Full time Senior Cloud Infrastructure Cloud Platforms

This position is no longer accepting applications (closed Oct 24, 2026).

Job Description

Codexis Inc is hiring a Senior Director to lead infrastructure strategy and cybersecurity operations across enterprise IT and enterprise AI capabilities.

Infrastructure roadmap ownership: Define and maintain a forward-looking roadmap for network, cloud, server, storage, endpoint, and application infrastructure aligned to IT and business priorities
Service operations accountability: Oversee service expectations, operating practices, and accountability for availability, performance, capacity, and lifecycle management of infrastructure services
Team and partner leadership: Set priorities and work allocation; coach employees and partners; contribute to performance discussions; clarify roles and build capabilities for current and future IT demands
Vendor and investment oversight: Oversee infrastructure vendors and service providers; support contract and budget decisions; communicate risk and performance; recommend investments based on business value and lifecycle needs
Network architecture and management: Lead connectivity, segmentation, remote access, perimeter services, and protection of critical environments
Cloud architecture and management: Lead Microsoft Azure and Microsoft 365 infrastructure and associated identity, endpoint, and security dependencies
Enterprise AI infrastructure design: Establish infrastructure architecture, approved platform patterns, environment controls, integration standards, capacity planning, observability, and support model for enterprise AI services and agent platforms
AI agent lifecycle governance: Maintain visibility into AI agents and owners; define intake, risk-tiering, development, testing, approval, publishing, change, monitoring, reassignment, and retirement expectations; ensure accountable ownership and support for production agents
Data governance for AI solutions: Partner with Business and IT to develop and enforce data classification, least-privileged access, approved data-source and connector controls, retention, privacy, intellectual-property, auditability, and data-loss-prevention requirements for AI
Security for AI services and agents: Coordinate threat modeling and security review; manage identity and secrets management; lead vulnerability management, logging, incident response, and business continuity for AI services and agents, including risks from excessive permissions, unsafe actions, unapproved integrations, and sensitive-data exposure
Platform operations: Guide architecture, standards, lifecycle planning, and operational performance for endpoints, servers, and storage
Application infrastructure enablement: Partner with application owners and business teams to deliver secure, supportable, and scalable infrastructure for enterprise and scientific applications
Cybersecurity leadership and integration: Provide cybersecurity leadership; oversee existing Managed Security Service Provider services; incorporate network, endpoint, server, identity, data protection, vulnerability management, incident response, and recovery requirements into infrastructure design and operations
Executive incident direction: Provide executive-level direction during significant infrastructure or security events; drive investigation and restoration; ensure corrective actions reduce recurrence
Standards and continuous improvement: Maintain architecture standards, service documentation, asset visibility, technology roadmaps, and meaningful measures for reliability, security, delivery, and continuous improvement
Business-facing risk translation: Translate technical options, constraints, and risks into clear recommendations for executives and cross-functional leaders

Requirements

Experience leading infrastructure strategy and operations across networks, cloud, servers, storage, endpoints, and application infrastructure
Experience translating business requirements into infrastructure architecture, roadmaps, standards, and prioritized investments
Experience leading teams and external service providers, including work allocation, coaching, performance input, and capability development
Experience managing Microsoft Azure and Microsoft 365 infrastructure or comparable enterprise cloud and productivity platforms
Experience with Microsoft Intune, Microsoft Purview, identity protection, AI security controls, or adjacent Microsoft security capabilities
Experience with Microsoft Copilot, Copilot Studio, agent administration, Power Platform governance, AI risk-management frameworks, or comparable enterprise AI platforms and controls
Experience directing major incidents, technical investigations, service restoration, and durable corrective actions
Experience defining and integrating cybersecurity, identity, vulnerability management, data protection, business continuity, and disaster recovery requirements into infrastructure decisions
Experience communicating technical risk, service performance, and investment recommendations to senior business and technology stakeholders
Education and experience appropriate to the role, such as a bachelor’s degree in information technology, computer science, engineering, or a related field, or equivalent relevant experience

Technologies

Microsoft Azure
Microsoft 365
Microsoft Intune
Microsoft Purview
Microsoft Copilot
Copilot Studio
Power Platform

Benefits

Medical, Dental and Vision Insurance
Basic Life, AD&D, Short- and Long-Term Disability Insurance
401k with Company Match up to 4%
Company Equity
Generous Paid Time Off including 18 Company Holidays (with a summer and winter shutdown), Vacation, and Wellness Time
Annual Lifestyle Account for reimbursement of fitness programs, equipment and more
Employee Stock Purchase Program (ESPP)
Flexible Spending Accounts (Commuter/Parking, Dependent Care & Healthcare)
Student Debt Program (Company Contribution to Loans)
Mental Health Wellness Program
Subsidized onsite lunch program
Onsite Gym Facilities
Paid Parental Leave

Valuable Additional Experience

Experience supporting infrastructure in biotechnology, life sciences, laboratory, manufacturing, or other regulated environments
Experience with formal architecture, service management, risk, or cybersecurity frameworks and controls
Experience modernizing hybrid infrastructure, increasing automation, improving observability, or advancing cloud operating models
Relevant certifications in cloud, networking, infrastructure, service management, cybersecurity, or enterprise architecture
Experience with vendor negotiations, financial planning, and lifecycle-based technology investment
Experience governing enterprise AI platforms or automation solutions, including data access, identity, connectors, lifecycle controls, monitoring, security review, and cross-functional risk decisions

View full job page →

1mo ago

Cybersecurity & IT Engineer

Compound Eye Redwood City, CA

Redwood City, CA

1mo ago Closed

$150k - $185k/yr Full time Cloud Identity Security Cybersecurity Tools Dns Security

This position is no longer accepting applications (closed Oct 23, 2026).

Job Description

Compound Eye is building a secure engineering environment that supports how teams develop, test, and operate. As the hands-on Cybersecurity & IT Engineer (hybrid, Redwood City), you will take ownership of identity, endpoint, network, and security practices for the engineering team, including internal standards aligned to NIST 800-171 and support for a CMMC 2.0 Level 2 environment.

This role is designed for someone who can operate independently, translate security requirements into practical guidance engineers will use, and maintain the day-to-day controls and evidence needed by an external compliance contractor.

Key Responsibilities

Develop internal security standards based on NIST 800-171, including hardening guides, onboarding and offboarding workflows, access reviews, and incident response runbooks.
Run recurring access, logs, and configuration audits, and maintain evidence for the compliance contractor.
Own identity and access across Entra ID, Intune, and Microsoft 365 (including Defender and Purview in GCC High), as well as Google Workspace.
Own email authentication and DNS for a production domain, including SPF, DKIM, DMARC, and MTA-STS; manage zones and certificates via Cloudflare.
Secure engineer and lab access using Cloudflare Tunnel / Zero Trust Mesh, VPN jump hosts, and SSH certificate authorities.
Manage a multi-platform device fleet (Windows, macOS, Linux, Android, iOS) and support the physical network, including firewalls, switches, VLANs, and lab isolation.
Define AI tooling guardrails for Claude Code and other agentic workflows.
Keep documentation current and manage vendor relationships within budget.
Handle hardware logistics from the Redwood City office, including shipping, returns, and spare equipment storage.

Requirements

5+ years in IT, systems administration, or security engineering, including experience owning broad-scope work on a small team.
Hands-on administration of both Microsoft 365 and Google Workspace.
Strong Linux administration, plus working competence with Windows and macOS.
Hands-on networking experience with firewalls, VPNs, managed switches, VLANs, and routing.
Practical experience with zero-trust or overlay networking, such as Cloudflare Tunnel, WireGuard, Tailscale, or similar.
Ownership experience for DNS and email authentication for a production domain.
Familiarity with NIST 800-171 and CMMC 2.0 sufficient to avoid creating compliance debt; no certification is required.
A track record of writing security practices engineers actually adopt.
Comfort working independently while partnering closely with engineering teams without close oversight.

Technologies

Entra ID, Intune, Microsoft 365, Defender, Purview, GCC High
Google Workspace, SPF, DKIM, DMARC, MTA-STS
Cloudflare, Cloudflare Tunnel, Zero Trust Mesh, VPN jump hosts
SSH certificate authorities, Windows, macOS, Linux, Android, iOS
Firewalls, switches, VLANs, Claude Code, WireGuard, Tailscale
NIST 800-171, CMMC 2.0

Compensation and Location

Location: Redwood City, CA (hybrid)
Salary: USD 150,000 - 185,000 per year

Benefits

Strong Incentive Stock Options (ISO)
Medical, dental, and vision insurance
Annual home office stipend
Employer-paid long-term disability, short-term disability, and life insurance
401(k) with employer match after 6 months
Flexible PTO and 8 holidays + 2 week winter break
Paid family leave
Quarterly onsites in San Francisco

Work Environment

Primarily hybrid from the Redwood City, CA office: typically 1–3 days per week on-site, with more days during build-outs and quarterly company on-sites.
Less than 10% domestic travel, occasional and infrequent.
Ability to lift and carry equipment up to 40 lbs, and do occasional on-site physical work (cabling, racking); reasonable accommodations available upon request.

Equal Opportunity / ITAR

This position requires access to technology controlled under the International Traffic in Arms Regulations (ITAR).
Applicants must be a U.S. person as defined under ITAR (U.S. citizen, lawful permanent resident, asylee, or refugee) or qualify for a license exception.

View full job page →

Cybersecurity Jobs in Redwood City, CA

Senior Software Engineer, Application Security

Staff Security Engineer

Senior Director - IT Infrastructure and Cybersecurity

Cybersecurity & IT Engineer

Get Cybersecurity Jobs in Redwood City, CA alerts