data engineer

senior software engineer Jobs in San Francisco

senior software engineer

software engineer

senior data engineer Jobs in San Francisco

senior data engineer

advisor - scientific data engineer Jobs in San Francisco

advisor - scientific data engineer

director network security engineer

Cresset

<div>About Cresset
Cresset is a firm built by clients, for clients. As an independent, award-winning multi-family office and private investment firm, we are reimagining the way wealth is experienced. Our purpose is to help ensure that both wealth and life are fully optimized*&mdash;integrated, intentional, and aligned with each client&rsquo;s vision of success.
We provide access to the caliber of talent, ideas, and investment opportunities typically available to the largest single-family offices and institutions. Our approach is personalized, entrepreneurial, and client-first.
Proudly owned by our clients and employees, Cresset was built to endure. We are creating a 100+ year firm&mdash;one focused on delivering an exceptional experience, not only for the families we serve but for the team that serves them. Our commitment to clients has earned recognition by Barron&rsquo;s and Forbes, listing us among the nation&rsquo;s top RIA firms. Cresset is guided by long-term relationships, shared success, and a belief that wealth should serve a life well lived. Learn more at www.cressetcapital.com.
Role Overview
We are seeking an experienced Director, Network Security Engineer with deep expertise in Netskope DLP to lead the design, implementation, and optimization of our enterprise data protection strategy. This role will be responsible for safeguarding sensitive data across cloud, web, email, and endpoint environments while enabling secure business operations.
The ideal candidate brings a combination of hands-on technical depth, strategic leadership, and cross-functional collaboration to mature and scale DLP capabilities across the organization.
Key Responsibilities<ul><li>
Lead the architecture, deployment, and management of DLP solutions
</li><li>Define and implement data protection policies, including data classification, discovery, and enforcement
</li><li>Oversee data monitoring and incident response processes related to data exfiltration and policy violations
</li><li>Collaborate with Security, IT, Legal, Compliance, and business units to align DLP controls with regulatory and business requirements
</li><li>Drive continuous improvement of DLP capabilities, including tuning policies to reduce false positives/negatives
</li><li>Provide technical leadership and mentorship to security engineers and analysts
</li><li>Integrate DLP with broader security ecosystem (CASB, SSE, SIEM, EDR, IAM, etc.)
</li><li>Develop and maintain metrics, dashboards, and reporting for DLP effectiveness and risk posture
</li><li>Support audits and compliance initiatives (e.g., GDPR, CCPA, HIPAA, PCI-DSS)
</li><li>Evaluate emerging technologies and recommend enhancements to the data protection program
</li></ul>Required Qualifications<ul><li>
5+ years of experience in cybersecurity, with a strong focus on Data Loss Prevention
</li><li>Expert-level experience with DLP (policy creation, deployment, troubleshooting, and optimization)
</li><li>Deep understanding of data classification frameworks and sensitive data types (PII, PHI, financial data, intellectual property)
</li><li>Experience implementing DLP across cloud (SaaS/IaaS), endpoints, and web traffic
</li><li>Strong knowledge of CASB/SSE architectures and cloud security principles
</li><li>Experience integrating DLP with tools such as SIEM, SOAR, EDR, and IAM platforms
</li><li>Familiarity with regulatory and compliance frameworks (GDPR, HIPAA, PCI, etc.)
</li><li>Strong analytical and problem-solving skills
</li></ul>Preferred Qualifications<ul><li>
Experience leading or managing security engineering teams or programs
</li><li>Certifications such as CISSP, CISM, CCSP, or industry certifications
</li><li>Experience with other DLP platforms (e.g., Symantec, Microsoft Purview, Forcepoint)
</li><li>Scripting or automation experience (Python, PowerShell, APIs)
</li><li>Experience in financial services or other highly regulated industries</li></ul>
<ul><li>Wealth Optimized, Life Elevated refers to the firm&rsquo;s philosophy and process in providing advisory and planning services and is not intended to convey a guarantee of results.</li></ul>
**Disclosures related to awards, recognitions, and rankings available here.
Cresset refers to Cresset Capital Management, LLC and its respective direct and indirect subsidiaries and controlled affiliates. For full list of Cresset subsidiaries and controlled affiliates, please see cressetcapital.com/disclosures/.</div>

DIRECTOR, NETWORK SECURITY ENGINEER

Veryon

<div>Description:

About Veryon
Veryon is the leading global provider of aviation software and information services, trusted by over 5000+ customers, 75,000 maintenance professionals, and 100+ OEMs across nearly 150 countries. Our mission is to deliver smarter, predictive technology solutions, including our AI platform, Veryon AIRE that maximizes aircraft uptime and operational efficiency for the world&rsquo;s most demanding aviation organizations.
At?Veryon, we are an?AI-forward company?focused on driving innovation and efficiency through emerging technologies. We prioritize hiring individuals who embrace AI, think creatively about its application, and are excited to continuously evolve alongside it.???
About the Role
We are seeking a Security Engineer I to help support the day to day operation and improvement of our security program, with a heavier focus on hands on implementation work across infrastructure, cloud, and core security tooling. This role will help close the gap between identifying security issues and getting the technical changes needed implemented.
This role will support security operations work such as alert and incident investigation, but a large part of the job will also be helping with infrastructure vulnerability remediation, cloud security configuration, administration of security tools, implementation of network and edge security controls, and general engineering support for security initiatives. This is an entry level role, but it is best suited for someone who wants real hands on technical exposure and is interested in learning how security work gets operationalized across cloud, infrastructure, compliance, and engineering.
 
 
Key Responsibilities<ul><li>
Configure and administer XDR(dashboard configurations, alert tuning, agent update coordination).</li><li>
Monitor, triage, and help investigate security alerts and incidents, including phishing, endpoint, and XDR related activity</li><li>
Assist with Harmony SASE policy exclusions, visibility improvements, troubleshooting, and general support of user traffic security controls</li><li>
Help with cloud security configuration reviews, hardening efforts, and reduction of unnecessary exposure across the environment (finding exposed endpoints, possible attack paths, etc and researching a solution to fix the risk.)</li><li>
Takes initiative to find ways to automate workflows.
</li><li>Support security driven technical remediation tied to compliance and audit related initiatives, including SOC 2, ISO 27001, and ISO 42001 efforts(gathering evidence, researching and planning remediations, etc)</li><li>
Work with IT, DevOps, engineering, and other internal teams to help move security recommendations into actual implemented changes</li><li>
Document procedures, findings, technical changes, and remediation work clearly and accurately</li><li>
Verification of security findings from customers and vulnerability reports.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field
</li><li>Internship, labs, projects, and/or up to 3 years of hands on experience in IT, software development, system administration, or network administration
</li><li>Experience with scripting or automation using Python, PowerShell, or similar languages
</li><li>Experience with basic network administration, system administration, software development or IT support.</li><li>
Exposure to basic phishing email analysis and EDR/XDR alert triage.</li><li>
Understanding of secure coding best practices such as OWASP top 10</li><li>
Understanding of Cloud security best practices</li><li>
Understanding of the incident response lifecycle</li><li>
Great communication skills</li></ul>
Preferred Qualifications:<ul><li>
Security+, CySA+, OSCP or other related certification</li><li>
Hands on Azure or AWS administration
</li><li>Experience with infrastructure as code</li><li>
Experience with vulnerability management</li><li>
Experience delivering and seeing projects through completion
</li></ul>Our Core Values:<ul><li>
Fueled by Customers: Customers are at the core of every decision.</li><li>
Win Together: Collaboration is our competitive edge.</li><li>
Make It Happen: No excuses. Just outcomes.</li><li>
Innovate to Elevate: We boldly challenge what&rsquo;s standard and lift what&rsquo;s possible.</li></ul></div>

SecOps Engineer

EvenUp

<div>EvenUp is on a mission to close the justice gap using technology and AI. We empower personal injury lawyers and victims to get the justice they deserve. Our products enable law firms to secure faster settlements, higher payouts, and better outcomes for victims injured through no fault of their own in vehicle collisions, accidents, natural disasters, and more.
We are one of the fastest-growing vertical SaaS companies in history, and we are just getting started. EvenUp is backed by top VCs, including Bessemer Venture Partners, Bain Capital Ventures, SignalFire, and Lightspeed. We are looking to expand our team with talented, driven, and collaborative individuals who seek to have a lasting impact. Learn more at www.evenuplaw.com.<h3 class="jobSectionHeader">
Life as an Engineer at EvenUp
</h3>EvenUp&rsquo;s security team is growing rapidly to support the company&rsquo;s mission of ensuring personal injury victims receive fair compensation. With ambitious goals to double the size of our engineering team by the end of 2026, we are looking for a hands-on Senior Security Engineer to lead and scale our security efforts. You&rsquo;ll work across functions to design and maintain secure infrastructure, evaluating whether to build or buy solutions as we grow. Your work will be critical in safeguarding our AI-native document generation platform, trusted by attorneys with over $1.5B in damages claimed to date.
As a Senior Security Engineer at EvenUp, you will set security strategy, collaborate with cross-functional partners, and drive major initiatives that secure customer data, our products, and our company&rsquo;s reputation.<h3 class="jobSectionHeader"> 
What You'll Do</h3><ul><li>
Risk Management: Identify and address security risks through comprehensive assessments, mitigation strategies, and execution.</li><li>
Code and Network Security: Ensure secure coding and implement systems to protect against unauthorized access and data breaches.</li><li>
Incident Response: Develop and execute incident response plans, conduct forensic analysis, and take preventive measures.</li><li>
Compliance and Ethics: Maintain compliance with regulations and industry standards, promote transparency, and address ethical concerns.</li><li>
Continuous Monitoring: Establish real-time monitoring systems, conduct regular assessments, and proactively respond to threats.</li><li>
Vendor &amp; Third-Party Security: Evaluate and secure third-party integrations to prevent vulnerabilities.</li><li>
Security Training: Educate and raise awareness for security best practices across the engineering team.</li><li>
Documentation &amp; Reporting: Maintain up-to-date documentation on protocols, incidents, and improvements; report regularly to stakeholders.</li></ul><h3 class="jobSectionHeader">
What We Look For</h3><ul><li>
5+ years in a security-focused engineering role, with hands-on technical architecture, implementation, and oversight experience.</li><li>
Proven security experience at a startup or high-growth company - you've built or scaled a security function before, not just maintained one.</li><li>
Expertise in SAST/DAST, application security, and CI/CD pipeline integration.</li><li>
Deep knowledge of AI-specific threats (prompt injection, model poisoning, membership inference, adversarial perturbation, output manipulation).</li><li>
Experience implementing security principles, operating system and web application security, and familiarity with the OWASP Top 10 and common threat tactics.</li><li>
Knowledge of next-generation security technologies (SASE, CASB, RASP).</li><li>
Hands-on experience with patch management, software supply chain security, and artifact repositories (e.g., JFrog, Snyk).</li><li>
Strong programming or scripting skills in at least one language (e.g., Python, Ruby, Node.js)</li><li>
Relevant cybersecurity certification (CISSP, CISM, CISA, CRISC, GIAC, etc.).</li><li>
Up-to-date on technology and vulnerability trends; ability to secure cloud computing applications and ecosystems.</li><li>
Application/infrastructure-level security design experience, including modern mitigation techniques (e.g., DNS-SEC, cryptographic fundamentals).</li><li>
Strong automation skills with Python.</li></ul>
This is a hybrid role, with an expectation of being in our SF office three days per week.
#LI-Hybrid
Notice to Candidates:
EvenUp has been made aware of fraudulent job postings and unaffiliated third parties posing as our recruiting team &ndash; please know that we have no affiliation or connection to these situations. We only post open roles on our career page (evenuplaw.com/careers) or reputable job boards like our official LinkedIn or Indeed pages, and all official EvenUp recruitment emails will come from the domains @evenuplaw.com, @evenup.ai, @ext-evenuplaw.com, no-reply@ashbyhq.com or no‑reply@canditech.io email addresses.
To ensure fairness and proper consideration, we do not accept resumes or expressions of interest via email or social media messages. If you&rsquo;re interested in a role, please submit your application directly through our careers page.
If you receive communication from someone you believe is impersonating EvenUp, please report it to us at talent-ops-team@evenuplaw.com. Examples of fraudulent domains include &ldquo;careers-evenuplaw.com&rdquo; and &ldquo;careers-evenuplaws.com&rdquo;.
Benefits &amp; Perks:
As part of our total rewards package, we offer attractive benefits and perks to our employees, including:<ul><li>
Choice of medical, dental, and vision insurance plans for you and your family.</li><li>
Additional insurance coverage options for life, accident, or critical illness.</li><li>
Flexible paid time off, sick leave, short-term and long-term disability.</li><li>
10 US observed holidays, and Canadian statutory holidays by province.</li><li>
A home office stipend.</li><li>
401(k) for US-based employees and RRSP for Canada-based employees.</li><li>
Paid parental leave.</li><li>
A local in-person meet-up program.</li><li>
Hubs in San Francisco and Toronto.</li></ul>
Please note the above benefits &amp; perks are for full-time employees
EvenUp is an equal opportunity employer. We are committed to diversity and inclusion in our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Compensation Range: $185,100 - $250,430</div>

Senior Security Engineer

Trace3

<div><div>Who is Trace3?

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.

Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!

Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco.
Ready to discover the possibilities that live in technology? 


Come Join Us!

Street-Smart - Thriving in Dynamic Times

We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the &quot;big picture.&quot; We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.

Juice - The &quot;Stuff&quot; it takes to be a Needle Mover
We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.

Teamwork - Humble, Hungry and Smart

We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it's due and demonstrate transparency. We &quot;bring the weather&quot; by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures &ndash; not just their success. We appreciate the individuality of the people around us.</div> 


About the Role:

The Network &amp; Security Architect provides education, guidance and thought leadership on emerging network &amp; security technologies to regional clients. The Network &amp; Security Architect will be responsible for a broad set of knowledge across enterprise network &amp; security solutions and should have a strong understanding of how technology enables businesses to develop strategies and meet objectives. Working together with regional sales teams, the Network &amp; Security Architect will seek to understand customer needs, develop solutions to exceed customer expectations, demonstrate the value of the proposed solution, assist with architectural integration design, and support the customer throughout the relationship lifecycle. This role will focus on strategic accounts in the Southwest Region with the purpose of building deep relationships, gaining trust and enabling client success.

What You'll Do:
<ul>
<li>Partner with regional sales team to execute comprehensive Network &amp; Security solutions that support business needs and objectives in complex environments for our clients</li>
<li>Create technical roadmaps, designs and competitive analysis with various network &amp; security solutions</li>
<li>Participate in business requirement gathering sessions, gathering user data requirements, understanding the user requirements, and assisting in the reconciliation of technical and business requirements as they relate to network &amp; security</li>
<li>Support prospects through RFP/RFI lifecycles, including assisting with defining requirements and facilitating responses.</li>
<li>Support prospects through POC lifecycles, including defining Test Plans and Success Criteria</li>
<li>Own successful implementation of sold solutions by ensuring smooth transition of designed solutions to the delivery team and remain engaged with the client while becoming a &quot;thought leader&quot; for the next opportunity</li>
<li>Ensure that a quality solution is delivered in a timely manner, within budget, and to our client's satisfaction</li>
<li>Communicate Trace3's value proposition to varying technical and non-technical clients, including executive ''C'' level management, VP, and Director levels, and end-users</li>
<li>Establish strong and lasting relationships with key stakeholders and decision makers in client organizations</li>
<li>Collaborate with Sales and Account Management team to develop sales playbooks outlining strategies for driving high value into strategic accounts</li>
<li>Contribute to the development of internal best practices as well as new innovative consulting services offerings that we can take to market</li>
<li>Contribute to Trace3's presence and brand in the Security community</li>
</ul>
Qualifications &amp; Interests:
<ul>
<li>A minimum of 8+ years working experience as a Network &amp; Security Architect</li>
<li>Prior experience working for a Consulting or Technology company</li>
<li>CCIE/CISSP or other relevant industry certifications preferred</li>
<li>Deep experience with traditional Route/Switch technologies including software defined networking such as Cisco ACI, EVPN, etc.</li>
<li>Deep experience with network &amp; security solutions surrounding Zero Trust and SASE principals</li>
<li>Deep Experience with platforms surrounding technologies such as CASB, DLP, SDWAN, RBI, Private Access, VPN, NAC, etc.</li>
<li>Experience with Network, Detection &amp; Response (NDR) platforms</li>
<li>Knowledge and familiarity with adjacent technology areas including Cloud, Data Intelligence, and IoT</li>
<li>Excellent presentation skills; able to comfortably communicate and present in front of C-Level Executives, VPs and Directors</li>
<li>Strong understanding of how clients use technology to meet business objectives</li>
<li>Familiarity with the local district markets</li>
<li>Strong interpersonal skills; able to work well with people from many different disciplines</li>
<li>Ability to lead and mentor other engineers</li>
<li>Strong ability to operate independently and manage multiple projects and priorities</li>
<li>Highly organized, detail-oriented, excellent time management skills and able to effectively prioritize tasks in a fast-paced, high-volume, and evolving work environment</li>
<li>Ability to approach customer and sales requests with a proactive and consultative manner; listen and understand user requests and needs and effectively deliver</li>
<li>Comfortable managing multiple and changing priorities, and meeting deadlines in an entrepreneurial environment</li>
<li>Strong ability to operate independently</li>
<li>Holds a valid drivers license and can travel to client sites when needed</li></ul><div> 

The Perks
<ul>
<li>Comprehensive medical, dental and vision plans for you and your dependents</li>
<li>401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability</li>
<li>Competitive Compensation</li>
<li>Training and development programs</li>
<li>Major offices stocked with snacks and beverages</li>
<li>Collaborative and cool culture</li>
<li>Work-life balance and generous paid time off</li></ul> 


Our Commitment

At the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.

We're committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.

As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.

Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.

If you require a reasonable accommodation to complete the application process or participate in an interview, please email recruiting@trace3.com. 


***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.</div></div>

Regional Senior Solutions Architect - Security

CRUSOE

<div>Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack &mdash; from electrons to tokens &mdash; to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.
We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that &mdash; with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.
We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved &mdash; people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.
If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.
About This Role
Crusoe is building the world&rsquo;s favorite AI-first cloud infrastructure. We are seeking a Staff Corporate Security Engineer to act as the principal architect for our corporate security posture.
In this role, you will move beyond tactical tool management to design high-assurance, preventative systems that safeguard our identity perimeter, global network, and SaaS ecosystem. As a senior technical leader, you will build a &ldquo;Secure by Default&rdquo; environment where security is seamlessly embedded into the employee experience.
What You&rsquo;ll Be Working On<ul><li>
Leading the design and implementation of Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) architectures, replacing legacy VPNs with identity-aware, perimeter-less access models</li><li>
Architecting preventative SaaS security across platforms such as Google Workspace, Slack, and Okta, including CASB controls to enforce data protection and monitor unauthorized applications or extensions</li><li>
Implementing Binary Authorization and device trust mechanisms, leveraging hardware-backed identity (e.g., TPM, Secure Enclave) to ensure only compliant devices can access corporate systems</li><li>
Designing and tuning Data Loss Prevention (DLP) controls across endpoints and SaaS platforms to protect intellectual property</li><li>
Strengthening email security posture, including MFA enforcement and session controls to mitigate phishing and session hijacking risks</li><li>
Architecting AI-native security frameworks, including governance and secure gateways for agent-based systems (e.g., MCP), ensuring all AI-driven actions are auditable and aligned with zero-trust principles</li><li>
Scaling identity and access management systems, including SSO, SAML, OAuth, SCIM, and designing Just-In-Time (JIT) access workflows to eliminate standing privileges</li><li>
Defining and executing a &ldquo;Crown Jewels&rdquo; security methodology, identifying and remediating high-risk vulnerabilities (e.g., IDOR, role-bypass) across critical systems</li></ul>
What You&rsquo;ll Bring to the Team<ul><li>
8+ years of experience designing and implementing Zero Trust, SASE, and modern identity-based security architectures</li><li>
Strong expertise in SaaS security, including CASB, DLP, and governance across platforms like Google Workspace, Okta, and Slack</li><li>
Experience implementing device trust, endpoint security, and hardware-backed identity solutions</li><li>
Strong understanding of identity and access management systems (SSO, SAML 2.0, OAuth, SCIM) and secure access patterns</li><li>
Knowledge of email security, phishing mitigation, and session security controls</li><li>
Experience identifying and mitigating application-layer vulnerabilities such as IDOR and privilege escalation risks</li><li>
Familiarity with emerging AI security challenges, including governance of agent-based systems and secure orchestration patterns</li><li>
Strong architectural mindset with the ability to design preventative, scalable security systems</li><li>
Excellent communication skills and ability to influence security decisions across engineering and business teams</li></ul>
Bonus Points<ul><li>
Experience implementing CASB platforms and enterprise DLP solutions at scale</li><li>
Familiarity with Model Context Protocol (MCP) or similar AI orchestration frameworks</li><li>
Experience building &ldquo;Secure by Default&rdquo; environments in high-growth organizations</li><li>
Background in cloud-native or AI infrastructure environment.</li></ul>
Benefits:<ul><li>
Competitive compensation and equity packages</li><li>
Restricted Stock Units</li><li>
Paid time off, paid holidays &amp; leave of absence programs</li><li>
Comprehensive health, dental &amp; vision insurance</li><li>
Employer contributions to HSA account</li><li>
Paid parental leave</li><li>
Paid life insurance, short-term and long-term disability</li><li>
Professional development &amp; tuition reimbursement</li><li>
Mental health &amp; wellness support</li><li>
Commuter benefits (parking &amp; transit)</li><li>
Cell phone stipend</li><li>
401(k) Retirement plan with company match up to 4% of salary</li><li>
Volunteer time off</li><li>
Global travel insurance &amp; emergency assistance</li><li>
Daily meals allowance</li><li>
Additional perks &amp; programs specific to location</li></ul>
Compensation Range
Compensation will be paid in the range of up to $210,000 - $255,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicants knowledge, education, and abilities, as well as internal equity and alignment with market data.
Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.</div>

Staff Corporate Security Engineer

San Francisco Department of Public Health

Recruitment: RTF0163725-01088993
 
Published: April 16, 2026
 
Contact
 
Jerome Anabu - Jerome.Anabu@sfdph.org
 
Apply using SmartRecruiters, the City and County of San Francisco's
 application portal.
 
Share
 
Department: Public Health
 
Job class: 
0943-Manager VIII
 
Starting salary range: $238,342.00 - $304,122.00 (Range A)
 Role type: Permanent Exempt What does this mean?
 
Hours: Full-time
 
About: 
The Department of Public Health prioritizes equitable and inclusive access to quality healthcare for its community and values the importance of diversity in its workforce. All employees at the Department of Public Health work to advance equity, inclusion, and diversity with a specific lens and focus on race, ethnicity, gender, sex, sexuality, disability, and immigration status.
 Application Opening: Thursday, February 19, 2026
 Application Deadline: Application filing will close on or after Thursday, February 26, 2026.
 Salary starts at $238,342 with a range up to $369,668 . Salary above the starting rate requires additional review and approval.
 Appointment Type: Permanent Exempt
 Recruitment ID: PEX-RTF0163725-01088993
 Becoming a City employee means being a part of a team that cares about making a difference. Your work will shape both the present and future of San Francisco. When you work for the City, you’re choosing a job with purpose.
 The Mission of the San Francisco Department of Public Health (SFDPH) is to protect and promote the health of all San Franciscans. SFDPH strives to achieve its mission through the work of multiple divisions - the San Francisco Health Network, Population Health, Behavioral Health Services, and Administration. The San Francisco Health Network is the City’s only complete system of care and has locations throughout the City, including Zuckerberg San Francisco General Hospital and Trauma Center, Laguna Honda Hospital and Rehabilitation Center, and over 15 primary care health centers. The Population Health Division (PHD) provides core public health services for the City and County of San Francisco: health protection, health promotion, disease and injury prevention, and disaster preparedness and response. Behavioral Health Services operates in conjunction with SFHN and provides a range of mental health and substance use treatment services.
 SFDPH is intentionally evolving toward a department-wide, performance-managed operating model, requiring senior leaders who can set direction, drive execution, and deliver results across a highly complex public health and healthcare environment.
 
Role description
 
The Director of Jail Health Services (JHS) is a senior physician executive responsible for leading and overseeing healthcare administration, operations, and delivery across four San Francisco County jail facilities. This role ensures that JHS fulfills its mission of delivering high-quality, patient-centered care to individuals in custody, while advancing public health principles within the criminal justice system.
 As a key member of the Department’s executive team, the Director sets strategic direction, oversees all JHS service lines, including medical, nursing, behavioral health, pharmacy, dental, and clinical support - and ensures compliance with local, state, and federal regulations governing correctional healthcare. The position optimizes systems and workflows, and fosters integration with other units, sections, and divisions of the San Francisco Health Network (SFHN) to create a seamless continuum of care.
 The Director collaborates extensively with City and County leadership, the Sheriff’s Department, and other stakeholders to address complex operational, fiscal, and policy challenges with significant implications for health equity and patient outcomes. Decisions made in this role have significant impact on patient safety, organizational integrity, and public confidence in correctional healthcare.
 The Director of Jail Health Services (0943 Manager VIII) performs the following essential job functions:
 Healthcare Administration and Compliance
 Serves as the designated health services administrator responsible for coordinating all levels of healthcare delivery in compliance with federal, state, and local regulations, while ensuring adherence to community standards of patient care and safety.
 Reviews and coordinates SF Sheriff’s Office (SFSO) healthcare policies and procedures; interprets policies, procedures, and regulations, and assesses the impact of pending and approved healthcare or corrections legislation on incarcerated individuals.
 Manages and directs the JHS communicable disease program, coordinating with the California Department of Public Health (CDPH), San Francisco DPH Communicable Diseases branch, and San Francisco Department of Human Resources (DHR) to protect incarcerated populations, employees, and the broader San Francisco community.
 Leads policy planning and implementation to ensure effective JHS operations.
 Administrative and Fiscal Management
 Plans, organizes, and directs the central administrative support services for JHS, including contract management, budget development, procurement, personnel administration, program planning and evaluation, and management information systems.
 Develops, supervises, and administers the JHS budget of $55 million, and collaborates with the finance unit to manage the division’s fiscal program, including preparation of the annual budget with justifications for personnel, capital outlay, and operating expenses.
 Interagency, Committee, and Community Engagement and Collaboration
 Serves as an integrated partner with all San Francisco Department of Public Health (DPH) divisions, including SFHN, Behavioral Health Services (BHS), and Population Health (PHD), working with clinical and administrative leadership and staff to meet the healthcare needs of incarcerated individuals in SF County Jail.
 Represents JHS in matters related to detention and healthcare across City departments, including the Department of Emergency Management (DEM), Department of Homeless and Supportive Health (HSH), Health Services Administration, and the Office of the Chief Medical Examiner.
 Serves as DPH liaison with the City Attorney’s Office, Courts, Public Defender, Adult Probation, and San Francisco Police Department on criminal justice issues.
 Participates in state and national committees on correctional health care and serves on SFHN and Ambulatory Care committees.
 The Director of Jail Health Services (0943 Manager VIII) may perform other duties as assigned/required.
 
How to qualify
 
License and Certification : 
Possession of a Doctor of Medicine (M.D.) Degree from an accredited college or university; AND possession and maintenance of a current/valid license to practice medicine issued by the Medical Board of California; OR
 Possession of a Doctor of Osteopathy (D.O.) Degree from an accredited college or university; AND possession and maintenance of a current/valid license to practice medicine issued by the Osteopathic Medical Board of California;
 AND
 Possession of a Board Certification or Board Eligibility in Family Medicine or Internal Medicine
 AND
 Possession and maintenance of a Drug Enforcement Administration (DEA) license
 Experience : Five (5) years of verifiable professional healthcare management experience in a correctional facility.
 <ul>
<li>Applicants possessing a valid license to practice medicine issued from another state within the United States of America may apply, but if selected, the candidate will NOT be appointed/hired until they obtain a valid license to practice medicine issued by the Medical Board of California or the Osteopathic Medical Board of California.</li>
</ul>
Applicants must meet the minimum qualification requirement by the final filing date unless otherwise noted.
 One-year full-time employment is equivalent to 2,000 hours (2,000 hours of qualifying work experience is based on a 40-hour work week).
 Condition of Employment: Security Clearance
 
Security clearance as issued by the Sheriff’s Department is required as a condition of employment for all positions at the Jail Health Services. Eligibles who have successfully participated in the examination process, received passing scores, and have been selected for hire will be required to obtain the security clearance prior to appointment. A photocopy of the security clearance must be provided to the supervisor on or before date of hire. Failure to demonstrate/show proof of security clearance may result in a dismissal and/or termination of employment.
 
Verification of Education and Experience : 
Every application is reviewed to ensure that you meet the minimum qualifications as listed in the job ad. Review SF Careers Employment Applications for considerations taken when reviewing applications.
 Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process. If education or experience verification is required, information on how to verify education and experience requirements, including verifying foreign education credits or degree equivalency, can be found at https://careers.sf.gov/knowledge/experience-education/ .
 Note: Falsifying one’s education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.
 
What else should I know?
 
Additional information regarding Employment with the City and County of San Francisco:
 Information About the Hiring Process
 Conviction History
 Employee Benefits Overview
 Equal Employment Opportunity
 Disaster Service Worker
 ADA Accommodation
 Right to Work
 Copies of Application Documents
 Diversity Statement
 Where to Apply
 
All job applications for the City and County of San Francisco must be submitted through our online portal. Please visit https://careers.sf.gov/ to begin your application process.
 Applicants may be contacted by email about this recruitment. Please consider using a personal email address that you check regularly rather than a work or school account.
 Computers are available for the public (9:00 a.m. to 4:00 p.m. Monday through Friday) to file online applications in the lobby of the Dept. of Human Resources at 1 South Van Ness Avenue, 4th Floor and at the City Career Center at City Hall , 1 Dr. Carlton B. Goodlett Place, Room 110.
 Ensure your application information is accurate, as changes may not be possible after submission. Your first and last name must match your legal ID for verification, and preferred names can be included in parentheses. Use your personal email address, not a shared or work email, to avoid unfixable issues.
 Applicants will receive a confirmation email from notification@smartrecruiters.com that their online application has been received in response to every announcement for which they file. Applicants should retain this confirmation email for their records. Failure to receive this email means that the online application was not submitted or received.
 If you have any questions regarding this recruitment or application process, please contact the analyst, Jerome Anabu at Jerome.Anabu@sfdph.org or (628) 271-6813.
 We may use text messaging to communicate with you on the phone number provided in your application. The first message will ask you to opt in to text messaging.
 The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.

Director of Jail Health Services (0943 Manager VIII) - Department of Public Health - EXEMPT

Hex Technologies

SF, NYC, or Remote (USA)
 About the role
 
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
 
About the role: 
Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
 Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
 Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
 Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
 Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
 Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
 Mentor engineers and advocate for cloud security across the organization.
 
About you: 
5+ years of experience in cloud security engineering, with extensive expertise in AWS.
 Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
 Expert-level knowledge and hands-on experience with Terraform.
 Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
 Familiarity with CNAPP solutions such as Wiz
 Familiarity with SIEM solutions such as Panther
 Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
 Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
 Bonus points for security certifications from SANS or OffSec.
 Excellent problem-solving, communication, and leadership skills.
 Our Engineering team
 
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
 
How we took down production…
 Beyond Linear Notebooks
 A pragmatic approach to live collaboration
 Our stack
 
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
 
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
 
The salary range for this role is: $200,000 - $265,000
 
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
 
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
 
About Hex
 
Hex is growing our team of builders on a mission to make everyone a data person. Our platform solves key pain points with today's data and analytics tooling, and empowers anyone to explore data using natural language, with or without code, on trusted context. Thousands of customers like Ramp, Figma, Stubhub, Anthropic, and Gamma love Hex for our beautiful UI, agentic superpowers, and boundless flexibility.
 
Hex has raised over $100M from leading investors like Sequoia, a16z, Snowflake and Amplify. With office hubs in San Francisco and New York, as well as remote team members throughout the US and UK, we're a high-agency team that ships fast and has fun doing it. Check out our Intro to Hex video and employee handbook to learn more about what it's like to work at Hex.

Cloud Security Engineer

Explore 172+ Director network security engineer in San Francisco this April. Find roles across top companies and apply now to boost your career.