San Francisco, CA

Cybersecurity Jobs in San Francisco, CA

18 jobs found

Include remote jobs

1d ago

Principal Product and Application Security Engineer / Founding Engineer

Motion Recruitment San Francisco, CA

San Francisco, CA

1d ago

Full time Application Security Application Security Engineering Application Security Strategy

Apply Now

Job Description

Join as a founding member to establish the application and product security foundations for a GPU cloud computing startup in San Francisco.

Responsibilities

Build out an appsec program from the ground up (or act as the first appsec hire) to establish the security environment end to end
Support and shape security for product and application initiatives
Drive business-aligned security decisions in partnership with non-technical leaders
Stay hands on with development while helping move security priorities forward

Requirements

8+ years experience across application security, product security, and or DevSecOps
Experience building an appsec program from the ground up is a huge plus, or experience serving as the first appsec hire
Experience with GraphQL authorization at scale
Experience architecting or operating a home-grown authentication service
Strong leadership background with the ability to be hands on while also supporting business initiatives
Experience partnering with non-technical leaders to support decision-making
Startup experience is a big plus
Must be currently authorized to work in the US on a full-time basis now and in the future

Location

San Francisco, CA 94102 (onsite)

Technology Focus

GraphQL

View full job page →

2d ago

Identity Security Analyst

Parsons San Francisco, CA

San Francisco, CA

2d ago

$88k - $155k/yr Full time Cloud Platforms Cybersecurity Tools Data Security

Apply Now

Job Description

Parsons is hiring a Consultant, Identity Security Analyst for a hybrid role in California. The contract runs September 2026 to June 2027 with onsite coverage Tuesdays, Wednesdays, and Thursdays and remote work Mondays and Fridays. This position supports enterprise infrastructure and security platforms through administration, operational oversight, maintenance, and ongoing support.

Compensation for this role is USD 88,400 to 154,700 per year.

Benefits and work support

Medical, dental, and vision
Paid time off, plus paid flexible holidays and holidays
Flexible work schedules
401(k) and Employee Stock Ownership Plan (ESOP)
Life insurance
Employee assistance program
Paid active-duty military leave

Key responsibilities

Provide technical administration and operational support for enterprise backup and recovery platforms, Okta identity and access management services, Zscaler internet access and private access services, and Infoblox DNS, DHCP, and IPAM services, including related integrations, reporting, documentation, and day-to-day support.
Administer backup policies, schedules, retention rules, and backup plans, including monitoring daily job status, failures, warnings, and success rates.
Troubleshoot failed or incomplete backup jobs and perform file-level, server-level, and application-level recovery as required.
Support backup configuration for virtual machines, physical servers, databases, file shares, and cloud workloads, and validate backup coverage for critical systems.
Assist with disaster recovery readiness and recovery testing, while generating compliance, capacity, and operational reports.
Maintain documentation for backup procedures, configurations, and escalation steps, and coordinate with application, server, storage, and security teams for backup-related issues.
Administer Okta users, groups, applications, policies, and integrations, including single sign-on, multi-factor authentication, lifecycle management, and provisioning configurations.
Troubleshoot authentication, MFA, SSO, provisioning, and directory synchronization issues by reviewing Okta system logs for access issues, failed logins, policy denials, and user activity.
Support integrations with Active Directory, Microsoft 365, and SaaS applications and help with Okta policy updates and device trust controls.
Support access reviews, user deactivation, account lifecycle events, and group membership validation, and assist with security and audit requests related to identity access activity.
Administer Zscaler policies, application segments, forwarding rules, access controls, and user/group assignments; troubleshoot ZIA/ZPA access issues involving PAC files, tunnels, and connectors.
Review logs and analytics to investigate blocked traffic, denied access, application access failures, and policy enforcement, and support SSL inspection policies, URL filtering, cloud firewall rules, and security exceptions.
Maintain and update PAC files or forwarding profiles, support Zscaler Client Connector deployments and upgrades, and monitor connector status and service health.
Administer Infoblox DNS, DHCP, IPAM, Grid, including creating/modifying DNS records and DHCP scopes, troubleshooting resolution and service availability, and supporting upgrades and hotfixes.
Manage role-based access controls for DNS/DHCP/IPAM administration, review audit logs and administrative activity as required, and assist with cloud-hosted Infoblox appliances where applicable.
Produce weekly or monthly operational status reports and recurring platform reporting (backup job health and compliance, Okta access and policy review, Zscaler access/policy summaries, and Infoblox change and health reports).

Required qualifications

At least 8+ years of experience.
Bachelor’s degree in Computer Science or Engineering is desired (not required).

Technologies you will work with

Okta
Zscaler (ZIA, ZPA)
Infoblox
Enterprise backup and recovery platforms
Active Directory, Microsoft 365
DNS, DHCP, IPAM
Azure, AWS
PAC files, tunnels, app connectors, cloud connectors
SSL inspection policies, URL filtering

Security clearance requirement: None.

Duration: September 2026 – June 2027.

View full job page →

18d ago

Staff AI Security Engineer

Okta San Francisco, CA

San Francisco, CA

18d ago

$180k - $248k/yr Full time Agent Agentic Ai Ai Security

Apply Now

Job Description

Okta is seeking a Staff AI Security Engineer to strengthen its Security team. In this senior individual contributor role, you will shape the technical vision and implement hands-on security controls for AI models, agentic workflows, and autonomous systems.

Role Focus

You will define scalable AI security infrastructure, establish security architectures for both local and hosted agents, and enable engineering teams to build and deploy AI capabilities safely. The position also includes mentoring engineers and coordinating closely with product, security, and infrastructure stakeholders.

Responsibilities

Design and deploy enterprise AI guardrails, gateways, and controls to protect agentic workflows from emerging threats.
Set up security architectures for local and hosted agents to address tool-calling, prompt injection, goal misalignment, and data exfiltration risks.
Create secure design patterns and developer tools that help teams implement AI features quickly while maintaining safety.
Lead threat modeling and security reviews for agentic AI systems, enterprise deployments, and agent ecosystems.
Build systems to discover, inventory, and assess AI usage and data flows across the enterprise.
Design and operate internal AI security platforms and develop integrated AI capabilities that automate complex security operations.
Drive technical alignment across product, security, and infrastructure teams, while mentoring engineers and security practitioners across domains.

Requirements

Deep knowledge of the AI threat landscape, including OWASP, MITRE ATLAS, and NIST AI RMF, with practical experience addressing prompt injection, excessive agency, and other AI-related threats.
8+ years of experience in security engineering or backend software development, with strong coding proficiency in Python or Go and hands-on cloud experience.
Experience securing or auditing agentic frameworks, including LangChain, Strands, Claude Agent SDK, or custom tool-calling agents, especially when operating within sandboxed environments.
Experience designing scalable cloud infrastructure on AWS or GCP, including API gateways, proxy architectures, and enterprise access controls.
A track record of building developer-first security tools and platform controls that support engineering velocity.
Strong communication skills, including experience driving technical strategy, influencing engineering leaders, and mentoring engineers.
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or equivalent practical experience.

Technologies

Python, Go
OWASP, MITRE ATLAS, NIST AI RMF
LangChain, Strands, Claude Agent SDK
AWS, GCP

Location and Employment Details

Location: San Francisco, CA (hybrid). Compensation: USD 180,000 - 247,500 per year. Experience level: 8+ years. Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or equivalent practical experience.

The Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

View full job page →

21d ago

Application Security (AppSec) Engineer - AI Trainer

DataAnnotation San Francisco, CA 🇺🇸 Remote

San Francisco, CA

21d ago

$50 - $100/hr Contract Ai Security Ai Security Evaluation Application Security

Apply Now

Job Description

DataAnnotation is seeking an Application Security (AppSec) Engineer - AI Trainer to support the training of AI models for cybersecurity use cases. The position focuses on reviewing AI-generated cybersecurity content for real-world validity and developing security-focused technical problems that improve how AI systems reason about threats and defenses.

Responsibilities

Assess AI-generated cybersecurity content, including threat analysis, vulnerability assessments, and offensive security techniques, with attention to real-world accuracy and applicability.
Create and solve security-focused technical problems used to train AI systems.
Produce clear technical explanations and security-relevant code.
Deliver feedback that directly informs the development of the next generation of AI security models.

Requirements

Minimum 2+ years of hands-on experience in a cybersecurity role such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent work, including government or military cyber operations.
Some coding experience required, including comfort navigating and patching a codebase.
Fluency in English (native or bilingual) with strong writing skills.
A bachelor’s degree is preferred.
Cybersecurity certifications are a plus, including OSCP, CRTO, GREM, GCFA, CEH, and similar credentials.

Benefits

Fully remote: available to work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: select which projects you take on and when you work, using your own computer from home.
Competitive pay: projects are paid hourly at $50 to $100 USD per hour, with the possibility of higher bonus rates for certain projects.
Impact: contribute to shaping AI technologies built for cybersecurity.

Contracting Details

Job type: contract.
Location: San Francisco, CA (remote).
Payment method: payment is made via PayPal.
Availability: this role is only available to candidates in the US, Canada, UK, Ireland, Australia, and New Zealand.

Additional Note

DataAnnotation states that it will never ask for any money from applicants.

View full job page →

22d ago

Special Agent: Cybersecurity/Technology Expertise

Federal Bureau of Investigation San Francisco, CA

San Francisco, CA

22d ago

$103k - $133k/yr Full time Agent Cyber Investigations Cybersecurity

Apply Now

Job Description

The FBI is seeking a Special Agent with cybersecurity and technology expertise to help plan and conduct investigations into potential federal law violations, including cybersecurity and public safety offenses. This full-time, on-the-road role combines specialized training with real-world investigative work, alongside a structured pathway that supports readiness for federal law enforcement duties.

What You’ll Do

Plan and conduct investigations of potential violations of federal laws, with a focus on cybersecurity and public safety.
Apply judgment, resourcefulness, and versatility to meet evolving investigative demands.
Build and maintain liaison relationships with federal, state, local, tribal, territorial, and international law enforcement agencies.
Maintain a level of physical fitness to support readiness required to perform law enforcement duties.

Requirements

Must be a U.S. citizen.
Must be able to obtain a Top Secret Sensitive Compartmented Information (SCI) Clearance.
Must be willing to travel as required.
Must meet the FBI’s Employment Eligibility requirements.
Must have a bachelor’s degree or higher (preferably in computer science, engineering, data science, information technology, or a related field) from a U.S. accredited college or university.

Compensation and Work Details

Salary: USD 103,326 to 133,200 per year. Salary is commensurate with base, locality, and availability pay.

Job Type: Full-time.

Location: San Francisco, CA (onsite), with work described as on the road.

Education: Bachelor’s degree or higher.

View full job page →

26d ago

FBI Special Agent: Cybersecurity/IT Expertise

Federal Bureau of Investigation San Francisco, CA

San Francisco, CA

26d ago

$103k - $133k/yr Full time Agent Comptia Cybersecurity Analyst Cybersecurity Tools

Apply Now

Job Description

The Federal Bureau of Investigation is seeking a cybersecurity-focused Special Agent based in San Francisco, CA with an onsite work arrangement. This full-time role combines investigative work under federal law with technical expertise in information security, including threat detection and analysis using SIEM tools.

Successful performance will draw on experience with cybersecurity concepts such as vulnerability analysis and encryption, along with the ability to coordinate effectively with law enforcement partners at multiple levels.

Key Responsibilities

Plan and conduct investigations involving potential violations of federal laws, cybersecurity, and public safety.
Apply judgment, resourcefulness, and versatility to meet investigative demands.
Develop and maintain liaison relationships with federal, state, local, tribal, territorial, and international law enforcement agencies.
Maintain a level of physical fitness to support readiness for law enforcement duties.

Requirements

Must be a U.S. citizen.
Must be able to obtain a Top Secret Sensitive Compartmented Information (SCI) Clearance.
Must be willing to travel as required.
Must meet the FBI’s Employment Eligibility requirements.
Must hold a master’s degree or higher from a U.S. accredited college or university.

Cybersecurity Technologies

SIEM tools
CompTIA certifications

Education

Master’s degree or higher from a U.S. accredited college or university

Salary and Employment Details

Pay range: USD 103,236 - 133,200 per year
Salary is commensurate with base, locality, and availability pay.
Job type: Full-time
Work location: On the road

Benefits

A robust benefits package

How to Apply

To apply, click the Apply button to be directed to the FBIJobs Careers website. Click Start to begin, then sign in or register with FBIJobs if you do not already have an account. Follow the step-by-step process to submit your interest, ensuring you complete all sections of the form and attach all required documents to successfully submit.

Step 3 documents:

Your resume, including relevant work experience with associated start and end dates. Your resume must not exceed two (2) pages.
College transcripts, if qualifying based on education or if there is a positive education requirement.
Veterans: DD 214
Disabled Veterans: DD 214, SF-15, and VA letter dated 1991 or later

View full job page →

1mo ago

Senior Cybersecurity Engineer

ECI San Francisco, CA

San Francisco, CA

1mo ago Closed

Up to $150k/yr Full time Senior Ansible Automation

This position is no longer accepting applications (closed Aug 30, 2026).

Job Description

ECI is seeking a hands-on Senior Cybersecurity Engineer to join its California on-site team, taking ownership of automation, pipelines, and integrations that power the company’s flagship security platform. You will write production-grade Python, ship CI/CD and infrastructure-as-code, and operate detection and response workflows within the Elastic Stack. The role offers a salary of USD 150,000 per yearly and calls for at least two years of professional experience along with a degree in Computer Science or Cyber Security, or an equivalent hands-on background.

Responsibilities

Develop and maintain Python-based automation, services, and integrations that enhance detection, response, and customer experience across the security platform
Design and operate CI/CD pipelines and infrastructure-as-code (Terraform, Ansible) to deploy and sustain security tooling
Create and refine detection and response content in the Elastic Stack including data ingestion, parsing and normalization, detection rules, and Kibana dashboards
Integrate security tools and data sources using REST APIs, webhooks, and SOAR playbooks
Containerize and deploy workloads with Docker and Kubernetes following secure-deployment practices
Write tests, documentation, and runbooks for the workflows and scripts you deliver
Collaborate with the Cybersecurity Architect to implement the platform’s reference architecture and detection standards

Requirements

Degree in Computer Science or Cyber Security, or equivalent hands-on experience
2+ years building software in a professional setting, with strong Python development (services, automation, and APIs, not only scripting)
Hands-on experience with the Elastic Stack (Elasticsearch, Logstash/Beats, Kibana) for log ingestion, detection, or analytics
Practical CI/CD experience, including automated testing, build pipelines, and secure deployment workflows
Working knowledge of infrastructure-as-code (Terraform, Ansible, or Salt) and configuration management
Proficiency with Git/GitHub in a collaborative engineering workflow
Experience with REST APIs, webhooks, and integrations in automation workflows
Familiarity with core security concepts: logging, alerting, threat detection, and incident response
Working knowledge of Linux and Windows and their security implications
Strong problem-solving mindset and clear written and verbal communication