software engineer

data engineer

security engineer

senior software engineer Jobs in San Francisco

senior software engineer

ai engineer

cybersecurity engineer

Veryon

<div>Description:

About Veryon
Veryon is the leading global provider of aviation software and information services, trusted by over 5000+ customers, 75,000 maintenance professionals, and 100+ OEMs across nearly 150 countries. Our mission is to deliver smarter, predictive technology solutions, including our AI platform, Veryon AIRE that maximizes aircraft uptime and operational efficiency for the world&rsquo;s most demanding aviation organizations.
At?Veryon, we are an?AI-forward company?focused on driving innovation and efficiency through emerging technologies. We prioritize hiring individuals who embrace AI, think creatively about its application, and are excited to continuously evolve alongside it.???
About the Role
We are seeking a Security Engineer I to help support the day to day operation and improvement of our security program, with a heavier focus on hands on implementation work across infrastructure, cloud, and core security tooling. This role will help close the gap between identifying security issues and getting the technical changes needed implemented.
This role will support security operations work such as alert and incident investigation, but a large part of the job will also be helping with infrastructure vulnerability remediation, cloud security configuration, administration of security tools, implementation of network and edge security controls, and general engineering support for security initiatives. This is an entry level role, but it is best suited for someone who wants real hands on technical exposure and is interested in learning how security work gets operationalized across cloud, infrastructure, compliance, and engineering.
 
 
Key Responsibilities<ul><li>
Configure and administer XDR(dashboard configurations, alert tuning, agent update coordination).</li><li>
Monitor, triage, and help investigate security alerts and incidents, including phishing, endpoint, and XDR related activity</li><li>
Assist with Harmony SASE policy exclusions, visibility improvements, troubleshooting, and general support of user traffic security controls</li><li>
Help with cloud security configuration reviews, hardening efforts, and reduction of unnecessary exposure across the environment (finding exposed endpoints, possible attack paths, etc and researching a solution to fix the risk.)</li><li>
Takes initiative to find ways to automate workflows.
</li><li>Support security driven technical remediation tied to compliance and audit related initiatives, including SOC 2, ISO 27001, and ISO 42001 efforts(gathering evidence, researching and planning remediations, etc)</li><li>
Work with IT, DevOps, engineering, and other internal teams to help move security recommendations into actual implemented changes</li><li>
Document procedures, findings, technical changes, and remediation work clearly and accurately</li><li>
Verification of security findings from customers and vulnerability reports.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field
</li><li>Internship, labs, projects, and/or up to 3 years of hands on experience in IT, software development, system administration, or network administration
</li><li>Experience with scripting or automation using Python, PowerShell, or similar languages
</li><li>Experience with basic network administration, system administration, software development or IT support.</li><li>
Exposure to basic phishing email analysis and EDR/XDR alert triage.</li><li>
Understanding of secure coding best practices such as OWASP top 10</li><li>
Understanding of Cloud security best practices</li><li>
Understanding of the incident response lifecycle</li><li>
Great communication skills</li></ul>
Preferred Qualifications:<ul><li>
Security+, CySA+, OSCP or other related certification</li><li>
Hands on Azure or AWS administration
</li><li>Experience with infrastructure as code</li><li>
Experience with vulnerability management</li><li>
Experience delivering and seeing projects through completion
</li></ul>Our Core Values:<ul><li>
Fueled by Customers: Customers are at the core of every decision.</li><li>
Win Together: Collaboration is our competitive edge.</li><li>
Make It Happen: No excuses. Just outcomes.</li><li>
Innovate to Elevate: We boldly challenge what&rsquo;s standard and lift what&rsquo;s possible.</li></ul></div>

SecOps Engineer

Cresset

<div>About Cresset
Cresset is a firm built by clients, for clients. As an independent, award-winning multi-family office and private investment firm, we are reimagining the way wealth is experienced. Our purpose is to help ensure that both wealth and life are fully optimized*&mdash;integrated, intentional, and aligned with each client&rsquo;s vision of success.
We provide access to the caliber of talent, ideas, and investment opportunities typically available to the largest single-family offices and institutions. Our approach is personalized, entrepreneurial, and client-first.
Proudly owned by our clients and employees, Cresset was built to endure. We are creating a 100+ year firm&mdash;one focused on delivering an exceptional experience, not only for the families we serve but for the team that serves them. Our commitment to clients has earned recognition by Barron&rsquo;s and Forbes, listing us among the nation&rsquo;s top RIA firms. Cresset is guided by long-term relationships, shared success, and a belief that wealth should serve a life well lived. Learn more at www.cressetcapital.com.
Role Overview
We are seeking an experienced Director, Network Security Engineer with deep expertise in Netskope DLP to lead the design, implementation, and optimization of our enterprise data protection strategy. This role will be responsible for safeguarding sensitive data across cloud, web, email, and endpoint environments while enabling secure business operations.
The ideal candidate brings a combination of hands-on technical depth, strategic leadership, and cross-functional collaboration to mature and scale DLP capabilities across the organization.
Key Responsibilities<ul><li>
Lead the architecture, deployment, and management of DLP solutions
</li><li>Define and implement data protection policies, including data classification, discovery, and enforcement
</li><li>Oversee data monitoring and incident response processes related to data exfiltration and policy violations
</li><li>Collaborate with Security, IT, Legal, Compliance, and business units to align DLP controls with regulatory and business requirements
</li><li>Drive continuous improvement of DLP capabilities, including tuning policies to reduce false positives/negatives
</li><li>Provide technical leadership and mentorship to security engineers and analysts
</li><li>Integrate DLP with broader security ecosystem (CASB, SSE, SIEM, EDR, IAM, etc.)
</li><li>Develop and maintain metrics, dashboards, and reporting for DLP effectiveness and risk posture
</li><li>Support audits and compliance initiatives (e.g., GDPR, CCPA, HIPAA, PCI-DSS)
</li><li>Evaluate emerging technologies and recommend enhancements to the data protection program
</li></ul>Required Qualifications<ul><li>
5+ years of experience in cybersecurity, with a strong focus on Data Loss Prevention
</li><li>Expert-level experience with DLP (policy creation, deployment, troubleshooting, and optimization)
</li><li>Deep understanding of data classification frameworks and sensitive data types (PII, PHI, financial data, intellectual property)
</li><li>Experience implementing DLP across cloud (SaaS/IaaS), endpoints, and web traffic
</li><li>Strong knowledge of CASB/SSE architectures and cloud security principles
</li><li>Experience integrating DLP with tools such as SIEM, SOAR, EDR, and IAM platforms
</li><li>Familiarity with regulatory and compliance frameworks (GDPR, HIPAA, PCI, etc.)
</li><li>Strong analytical and problem-solving skills
</li></ul>Preferred Qualifications<ul><li>
Experience leading or managing security engineering teams or programs
</li><li>Certifications such as CISSP, CISM, CCSP, or industry certifications
</li><li>Experience with other DLP platforms (e.g., Symantec, Microsoft Purview, Forcepoint)
</li><li>Scripting or automation experience (Python, PowerShell, APIs)
</li><li>Experience in financial services or other highly regulated industries</li></ul>
<ul><li>Wealth Optimized, Life Elevated refers to the firm&rsquo;s philosophy and process in providing advisory and planning services and is not intended to convey a guarantee of results.</li></ul>
**Disclosures related to awards, recognitions, and rankings available here.
Cresset refers to Cresset Capital Management, LLC and its respective direct and indirect subsidiaries and controlled affiliates. For full list of Cresset subsidiaries and controlled affiliates, please see cressetcapital.com/disclosures/.</div>

DIRECTOR, NETWORK SECURITY ENGINEER

OpenAI

About the Team
 
Security is foundational to OpenAI’s mission of ensuring that artificial general intelligence benefits all of humanity. As OpenAI builds and operates increasingly powerful systems, security helps make that progress durable, trustworthy, and resilient.
 
The Security team protects OpenAI’s technology, people, and products, but our role goes beyond defense alone. We help enable the infrastructure, research, and product work that powers frontier AI, bringing deep technical judgment and hands-on operational execution to some of the most important systems being built today. Our work is grounded in impact, pragmatism, and preparing for the security challenges that come with increasingly capable technology.
 
About the Role
 
We are seeking an experienced and highly technical Data Center Security Engineer to help secure the infrastructure behind OpenAI’s rapidly expanding data center footprint. This is a chance to work on high-consequence systems at the intersection of cybersecurity, critical infrastructure, and advanced AI, where strong technical judgment and careful execution have direct, lasting impact.
 
In this role, you will operate with substantial agency and ownership alongside a small team of data center security experts, driving security architecture, control validation, and defensive improvements across multiple, diverse environments, with particular emphasis on IT, Enterprise, ICS and Operational Technology (OT) networking. You will help define and raise the security bar for infrastructure programs already in flight while shaping how future deployments are secured from the start.
 
This role's preferred location is one of our OpenAI offices in San Francisco, Seattle, or New York City and relocation assistance is available. We are also open to considering candidates who are remote.
 
In this role, you will: 
Design and implement security controls that protect data center infrastructure across a growing global footprint, with particular focus on both OT and IT networking environments.
 
Partner closely with a small team of data center security specialists, as well as engineering, operations, and broader security teams, to deliver resilient and practical security outcomes.
 
Secure OT and IT networking environments through strong segmentation, access control, monitoring, hardening, and connectivity patterns suited to critical infrastructure.
 
Contribute to security architecture and design reviews for data center systems, including OT and IT networking, network segmentation, identity and access management, provisioning workflows, hardware and firmware trust boundaries, and operational safeguards.
 
Perform recurring audits, control assessments, and validation activities across OT and IT networking environments to ensure continued compliance against defined controls.
 
Drive ongoing evidence collection, gap tracking, and remediation follow-through so control deficiencies are identified quickly and closed durably.
 
Help define measurable security standards, control objectives, audit procedures, evidence requirements, and validation mechanisms for infrastructure and facility security programs.
 
Support security monitoring, incident response, and post-incident improvement efforts for data center, OT, and IT networking environments.
 
Work with suppliers, partners, and internal stakeholders to evaluate and reduce risks associated with third-party hardware, firmware, software, and operational dependencies.
 
Continually evolve the security of our data centers alongside changes in adversary activity, infrastructure complexity, and the increasing demands of OpenAI’s systems.
 
You might thrive in this role if you have: 
15+ years of experience in security, including meaningful hands-on experience securing large-scale infrastructure, industrial environments, or data center systems.
 
Deep expertise securing OT and IT networking environments in critical infrastructure settings, including segmentation strategies, remote access controls, asset visibility, and compensating controls for operational constraints.
 
Experience building audit or assurance programs that validate ongoing compliance with defined security controls, especially across OT and IT networking environments, rather than relying on one-time point-in-time reviews.
 
Strong cross-functional collaboration skills including the ability to partner effectively with internal and external stakeholders while operating with a high degree of autonomy.
 
Strong knowledge of security engineering and operations across network security, IAM and PAM, hardening, provisioning, monitoring, incident response, and secure lifecycle practices.
 
Experience protecting hyperscale, colocation, or hybrid infrastructure environments against sophisticated adversaries.
 
Familiarity with control and governance frameworks such as NIST, ISO 27001, or SOC 2, and the ability to translate them into concrete technical and operational requirements.
 
The ability to operate as a high-ownership individual contributor who influences through technical judgment, collaboration, and execution.
 
Clear written and verbal communication skills, including the ability to explain risk, controls, and tradeoffs to both technical and non-technical partners.
 
About OpenAI
 
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
 
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
 
For additional information, please see
 
OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement
 
.
 
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
 
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through
 
this form
 
. No response will be provided to inquiries unrelated to job posting compliance.
 
We are committed to providing reasonable accommodations to applicants with disabilities.
 
OpenAI Global Applicant Privacy Policy
 
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
 
Compensation
 
$234.4K – $385K + Offers Equity • Multiple Ranges

Data Center Security Engineer

Rippling

<div><h2 class="jobSectionHeader">About Rippling</h2>
Rippling gives businesses one place to run HR, IT, and Finance. It brings together all of the workforce systems that are normally scattered across a company, like payroll, expenses, benefits, and computers. For the first time ever, you can manage and automate every part of the employee lifecycle in a single system. 
Take onboarding, for example. With Rippling, you can hire a new employee anywhere in the world and set up their payroll, corporate card, computer, benefits, and even third-party apps like Slack and Microsoft 365&mdash;all within 90 seconds. 
Based in San Francisco, CA, Rippling has raised $1.4B+ from the world&rsquo;s top investors&mdash;including Kleiner Perkins, Founders Fund, Sequoia, Greenoaks, and Bedrock&mdash;and was named one of America's best startup employers by Forbes. 
We prioritize candidate safety. Please be aware that all official communication will only be sent from @Rippling.com addresses.<h3 class="jobSectionHeader"> 
About The Role</h3>
Rippling is looking for a hands-on Security Engineer &ndash; Offensive Security to join our growing security team. In this role, you&rsquo;ll design and execute offensive security initiatives that challenge our defenses, shape detection capabilities, and strengthen the resilience of a platform spanning HR, IT, Payments, Identity, and Infrastructure. 
As an early member of the Red Team, you&rsquo;ll apply an attacker&rsquo;s mindset across Rippling&rsquo;s people, processes, and technology&mdash;running realistic adversary simulations, uncovering vulnerabilities, and driving threat-informed defense across our most critical assets. This is a rare opportunity to have meaningful scope and visibility while building a program that influences company-wide security strategy. 
About The Team
Our security engineering team is a diverse group of builders, breakers, and problem solvers. We partner closely with Engineering to design scalable solutions and rethink traditional security models for a rapidly growing ecosystem.
We recently shared our work at:<ul><li>
Our Infrastructure Security team shared a blog about how they streamlined AWS access</li><li>
We spoke at BSides SF about attacking and defending infrastructure with terraform</li><li>
Our Product Security Director talked about the Strategies to Scale Security in Expanding Organizations</li></ul> 
What You'll Do<ul><li>
Design and execute covert Red Team operations to measure Rippling&rsquo;s readiness against advanced adversaries</li><li>
Conduct threat emulation, assumed breach, and purple team exercises across cloud infrastructure, endpoints, applications, and identity systems</li><li>
Build custom tooling and automation to accelerate offensive operations and reduce manual effort</li><li>
Partner with Blue Teams to improve detection and response engineering, aligning with MITRE ATT&amp;CK and real-world TTPs</li><li>
Influence security investment and prioritization across Engineering, Operations, Finance, and Sales through threat-informed insights</li><li>
Lead post-engagement debriefs with technical teams and senior leadership, translating risk into clear, actionable recommendations</li></ul><h2 class="jobSectionHeader">
Qualifications</h2><ul><li>
2+ years in an offensive security or Red Team role (or equivalent hands-on experience)</li><li>
Demonstrated ability to break down complex problems into measurable, solvable components</li><li>
Proficiency in scripting (Python, PowerShell, Bash) and building Red Team tooling</li><li>
Experience automating offensive workflows and comfort with software development practices</li><li>
Hands-on experience with C2 frameworks (Cobalt Strike, Mythic, or custom-built alternatives)</li><li>
Deep understanding of attacker TTPs and common detection/response patterns</li><li>
Experience conducting or guiding cross-team architectural changes to reduce systemic risk</li><li>
Familiarity with cloud environments (AWS), SaaS ecosystems, and modern identity systems (SSO, OAuth, SAML, MFA)</li><li>
Excellent written and verbal communication, with the ability to translate technical risk for non-technical stakeholders</li></ul><h2 class="jobSectionHeader">
Additional Information</h2>
Rippling is an equal opportunity employer. We are committed to building a diverse and inclusive workforce and do not discriminate based on race, religion, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, veteran or military status, or any other legally protected characteristics, Rippling is committed to providing reasonable accommodations for candidates with disabilities who need assistance during the hiring process. To request a reasonable accommodation, please email accommodations@rippling.com.
Rippling highly values having employees working in-office to foster a collaborative work environment and company culture. For office-based employees (employees who live within a defined radius of a Rippling office), Rippling considers working in the office, at least three days a week under current policy, to be an essential function of the employee's role.
This role will receive a competitive salary + benefits + equity. The salary for US-based employees will be aligned with one of the ranges below based on location; see which tier applies to your location here.
A variety of factors are considered when determining someone&rsquo;s compensation&ndash;including a candidate&rsquo;s professional background, experience, and location. Final offer amounts may vary from the amounts listed below. 
The pay range for this role is: 
135,000 - 236,250 USD per year(US Tier 1) 
121,500 - 212,625 USD per year(US Tier 2) 
114,750 - 200,813 USD per year(US Tier 3)</div>

Security Engineer II, Offensive Security

Centers for Medicare and Medicaid Services

Security Engineer

iRhythm Technologies

<div>Position: Senior R&amp;D Project Manager
Location: 699 8th Street, Suite 600, San Francisco, CA 94103 
Responsibilities include:
iRhythm Technologies, Inc. seeks a Senior R&amp;D Project Manager (San Francisco, CA) to lead and manage the design and development of clinical software solutions for iRhythm products and services. Lead a cross-functional team to ensure that clinical needs are met by incorporating regulatory and compliance requirements into the software design and development process. Participate in production release/ health monitoring activities. Support regulatory affairs to prepare necessary documentation such as risk analysis, cybersecurity documents, clinical data, software validation and verification, and algorithm performance testing for regulatory submissions. Oversee execution of medical device and cybersecurity risk management activities. Guide and manage the usage of Agile Methodologies and Scrum frameworks to simplify program delivery. Establish and maintain the product Design History File (DHF) following compliance and regulatory standards. Work with product and engineering teams to build and maintain clear program roadmaps. Develop a technical project timeline to meet program strategy, budget, scope and business needs. Prioritize program workstreams, consistent with program strategy. Identify potential roadblocks early and lead the team to develop and implement counter measures. Facilitate and foster strong communication among stakeholders, ensuring all parties are aligned on the goals, timelines and compliance needs. Drive tactical decisions for projects. Local telecommuting permitted up to 4 days per week. 10% domestic travel and 3% international travel required. 
SALARY RANGE: $164,714 to $246,000 per year 
JOB REQUIREMENTS:
Requires a Master&rsquo;s degree in Electrical Engineering, Biomedical Engineering or related field and 5 years of experience managing software development projects within medical device applications. Must have experience with: Technical Project management and Agile methodologies; Managing projects involving large cross-functional teams; Standards and guidelines such as IEC 62304, IEC 62366, IEC 60601, ISO 14971, ISO 13485 and 21 CFR Part 820; Managing 510(k) submission(s) and other regulatory submissions to the FDA; Practical
knowledge of US and international regulations including FDA, EU MDR, PMDA, and UKCA for Software as a Medical Device (SaMD); Software platforms including Smartsheet for project management, the Atlassian Toolset (Jira and Confluence), Jama for requirements management, and Aha! for product portfolio management; and Supporting regulatory affairs to prepare necessary documentation such as risk analysis, cybersecurity documents, clinical data, software validation and verification, and algorithm performance testing for regulatory submissions. 
THIS POSITION IS ELIGIBLE FOR THE EMPLOYEE REFERRAL PROGRAM</div>

Senior R&D Project Manager

Apple

Imagine what you could do here. At Apple, new ideas have a way of becoming great products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you can accomplish. We are seeking an exceptional engineer with a background in large scale software development and delivery in hyper-scale distributed computing environments. You will work within cybersecurity software engineering team that drives Apache Spark&rsquo;s state-of-the art features and pushes the boundaries of what is possible in our industry. 
 
Description 
 
Apple is seeking an extraordinary individual to work on a team supporting and developing services which underpin mission critical information security capabilities. Spark expertise is a prerequisite. While previous experience in information security is not required, a sincere drive for security and privacy is required. This role will work closely with our engineering teams and with partner teams to ensure the successful design, development, and delivery of product objectives. The successful candidate will have a passion for technical excellence and team collaboration with a heavy focus on using cutting-edge technologies to build data intensive systems, designing and optimizing data models, and collaborating with cross-functional teams to solve complex data challenges. 
 
Preferred Qualifications 
 
5+ years experience in data engineering and demonstrated expertise with data modeling 
 
5+ years of experience with JVM languages: Java or Scala 
 
5+ years experience with big data platforms 
 
Familiarity with ML/AI workflows and feature engineering to support analytics, reporting, and machine learning use cases 
 
Knowledge engineering expertise including semantic models and knowledge graphs 
 
Experience working with cloud compute environments like OpenStack, AWS, and Azure 
 
Experience mentoring engineers, conducting code reviews, and contributing to technical best practices and documentation 
 
Knowledge of data quality frameworks and validation techniques 
 
Knowledge of data governance and compliance frameworks 
 
Minimum Qualifications 
 
4 years+ demonstrated expertise in designing and implementing relational and medallion data architectures 
 
4 Years+ demonstrated expertise in the design and implementation of production data pipelines at scale 
 
4 Years+ demonstrated proficiency with JVM languages (Scala or Java preferred), Spark, Golang, or Swift 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $147,400 and $272,100, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Senior Data Engineer

Explore 110+ Cybersecurity engineer in San Francisco this April. Find roles across top companies and apply now to boost your career.