software engineer

ai engineering lead Jobs in San Francisco

ai engineering lead

cloud security engineer Jobs in San Francisco

cloud security engineer

director, support engineering Jobs in San Francisco

director, support engineering

engineer

it security engineer

BRAIN

<div><h2 class="jobSectionHeader">About Brain Co.</h2>
Brain Co. is an applied AI startup co-founded by Jared Kushner and Elad Gil, and backed by leading Silicon Valley builders including Patrick Collison and Andrej Karpathy. 
 
We are building AI applications for the world&rsquo;s most important institutions, delivering impact on real-world problems across governments, healthcare systems, and critical industries. 
 
Our progress so far:<ul><li>
Automated construction permitting for a sovereign government 80% faster, unlocking $375M+ in value</li><li>
Optimized supply chains for a leading global energy company 30% lower cost, 99% reliability, preventing $100M+ in losses</li><li>
Streamlined hospital patient care across national health systems 40% better outcomes, 80% less admin work</li></ul>
Company momentum:<ul><li>
Raised a $55M Series A from leading investors</li><li>
Built a team of 70+ AI experts from Tesla, Google DeepMind, NVIDIA, and Databricks</li></ul>
At Brain Co., we focus on applying frontier AI to real institutional challenges, working alongside governments, healthcare systems, and critical industries to modernize how essential services operate. 
 
We are looking for leaders who want to help bring new technology into institutions that impact millions of people.<h2 class="jobSectionHeader">
About the role:
</h2>As our IT Engineer, you'll own the corporate technology layer end-to-end &mdash; identity and access management, SaaS tooling, device security, and the employee-facing systems that keep a fast-growing company running safely. This is a high-ownership role at the intersection of IT engineering and corporate security: you'll own the IT execution across identity, access, device, and SaaS &mdash; contributing directly to security programs like SOC 2 and Zero Trust &mdash; while also serving as the first line of support for our team's day-to-day needs. You'll work closely with Security, HR, and Engineering to build the operational foundation that lets Brain Co. scale without sacrificing security or employee experience.<h2 class="jobSectionHeader">
What you'll work on:
</h2>Identity &amp; Access Management<ul><li>
Own our Okta environment and consolidate SSO: migrations, managing provisioning, lifecycle automation, and federation across all departments.</li><li>
Implement and improve our 3-tier access entitlement model: auto-grant for Tier 1, manager approval for Tier 2, manager + security approval for Tier 3.</li><li>
Build and operationalize HRIS-triggered provisioning and offboarding automation across our identity and SaaS stack.</li></ul>
Corporate Security Operations<ul><li>
Support access review programs and contribute to SOC 2 compliance efforts &mdash; maintaining audit trails, approval chains, and provisioning logs.</li><li>
Contribute to Zero Trust and endpoint security initiatives: device trust, EDR integration, MDM, and least-privilege access across corporate and BYOD devices.</li><li>
Drive SaaS hygiene across our tooling estate &mdash; shadow IT discovery, configuration hardening, and data classification in partnership with the security team.</li></ul>
IT Engineering &amp; Automation<ul><li>
Build the integrations and automation that eliminate manual IT work &mdash; connecting identity, HRIS, and SaaS tooling into scalable provisioning workflows.</li><li>
Own the access request process end-to-end, and maintain the runbooks, documentation, and self-service resources that keep the team unblocked.</li></ul>
Service Desk &amp; Employee Experience<ul><li>
Partner on IT support for a 70+ person team &ndash;&ndash; triaging and resolving hardware and software issues with pragmatism and good judgment.</li><li>
Own device lifecycle and support new hire onboarding end-to-end, ensuring a seamless Day 1 experience.</li></ul><h2 class="jobSectionHeader">
You might be a great fit if you...</h2><ul><li>
Have 4+ years of experience in IT engineering, corporate security, or a combined IT/SecOps role with hands-on ownership of identity and SaaS environments.&bull;Have deep, practical experience with Okta &mdash; SSO configuration, lifecycle management, MFA policies, and group-based provisioning.</li><li>
Have built or managed HRIS/IT integrations and understand how provisioning pipelines work across HR, identity, and downstream SaaS tools.</li><li>
Have run access reviews and understand what SOC 2 access control evidence looks like &mdash; logs, approval chains, audit trails.</li><li>
Are comfortable in the command line and can write scripts (Terraform, Python, Bash, or similar) to automate</li><li>
repetitive IT work.</li><li>
Have supported end users at a fast-moving company and know how to balance velocity with security</li><li>
without being a blocker.</li><li>
Think in terms of systems and workflows, not just tickets &mdash; you look for root causes and build durable</li><li>
fixes.</li><li>
Thrive in ambiguous, high-agency environments and want to own a function, not just execute tasks.</li><li>
Bonus points for:</li><li>
Hands-on experience with Rippling or a similar HRIS platform.</li><li>
Familiarity with MDM platforms (Jamf, Kandji, or Intune) for Mac and Windows fleets.</li><li>
Experience with Google Workspace administration and security hardening.</li><li>
Prior work at a startup where you wore both IT and security hats simultaneously.</li></ul><h2 class="jobSectionHeader">
Why join us:</h2><ul><li>
Drive corporate IT at a company deploying AI to governments, hospitals, and critical industries &mdash; the stakes are real.</li><li>
Build systems from scratch with a clear roadmap, real ownership, and direct impact on how the company scales IT.</li><li>
Work alongside senior engineers from Tesla, DeepMind, Databricks, and other top engineering organizations.</li><li>
Ship meaningful automation and IT platform infrastructure &mdash; not just keep the lights on.</li><li>
Earn competitive compensation and meaningful equity in a high-growth company.</li></ul><h2 class="jobSectionHeader">
Benefits</h2><ul><li>
Competitive salary plus equity</li><li>
Daily lunches</li><li>
Commuter benefits</li><li>
401(k)</li><li>
Medical, Dental, and Vision</li><li>
Unlimited PTO</li></ul></div>

IT Security Engineer

Handshake

<div><h1 class="jobSectionHeader">About Handshake</h1>
Handshake is the career network for the AI economy. 20 million knowledge workers, 1,600 educational institutions, 1 million employers (including 100% of the Fortune 50), and every foundational AI lab trust Handshake to power career discovery, hiring, and upskilling, from freelance AI training gigs to first internships to full-time careers and beyond. This unique value is leading to unparalleled growth; in 2025, we tripled our ARR at scale.
Why join Handshake now:<ul><li>
Shape how every career evolves in the AI economy, at global scale, with impact your friends, family and peers can see and feel</li><li>
Work hand-in-hand with world-class AI labs, Fortune 500 partners and the world&rsquo;s top educational institutions</li><li>
Join a team with leadership from Scale AI, Meta, xAI, Notion, Coinbase, and Palantir, among others</li><li>
Build a massive, fast-growing business with billions in revenue</li></ul><h2 class="jobSectionHeader">
About the Role</h2>
Handshake is seeking a Senior Security Engineer to own the architecture, design, and implementation of our enterprise identity automation and governance ecosystem. You&rsquo;ll define the long-term IAM automation strategy, build resilient and scalable lifecycle workflows, and enable secure-by-default identity operations across SaaS, cloud, and internal platforms. 
You&rsquo;ll partner closely with Security, IT Engineering, People Operations, and Product/Platform Engineering to deliver highly automated, auditable, and reliable identity solutions.<h2 class="jobSectionHeader">
In this role, you will:</h2><ul><li>
Architect, build, and own automated onboarding, offboarding, and access-change workflows across Okta, Workday, SCIM, and event-driven systems.</li><li>
Engineer integration layers between identity platforms and internal applications using Python, REST APIs, Webhooks, and Terraform.</li><li>
Implement error-handling, reconciliation logic, telemetry, and monitoring to ensure reliability and determinism in identity lifecycle events.</li><li>
Modernize existing provisioning logic and replace manual processes with scalable automation frameworks.</li><li>
Develop tooling and pipelines enabling version-controlled, testable, observable IAM automation.</li><li>
Act as a technical owner for Handshake&rsquo;s IAM ecosystem, including Okta, Google Workspace, GCP, AWS IAM, and internal access systems.</li><li>
Engineer and optimize authentication &amp; authorization protocols (OIDC, OAuth2, SAML, JWT), fine-grained access policies, and scalable RBAC/ABAC models.</li><li>
Build custom automation using Okta Workflows or API-driven orchestration.</li><li>
Design SOC2-compliant access controls, approvals, attestations, and auditability mechanisms.</li><li>
Build automated access certification systems with full data lineage.</li><li>
Conduct identity-related incident forensics and implement preventative automation.</li><li>
Provide cross-functional leadership, setting standards, best practices, and reference architectures for identity automation.</li><li>
Serve as service owner for IAM automation platforms with accountability for uptime, consistency, and continuous improvement.</li></ul><h2 class="jobSectionHeader">
Desired Capabilities</h2><ul><li>
4&ndash;7+ years of hands-on IAM engineering, identity automation, or identity governance experience.</li><li>
Strong scripting/automation skills in Python, Node.js, and REST-based integrations.</li><li>
Experience with IAM platforms such as Okta, Google Workspace/GCP, Azure AD, or similar.</li><li>
Deep understanding of identity protocols, token flows, SCIM, and distributed lifecycle orchestration.</li><li>
Experience with Terraform or other infrastructure-as-code frameworks.</li><li>
Ability to diagnose complex identity issues across SaaS, cloud, and distributed systems.</li><li>
Strong understanding of DevOps practices, observability, and secure engineering principles.</li><li>
Demonstrated ownership mindset across architecture, implementation, monitoring, and iterative improvement.</li></ul><h2 class="jobSectionHeader">
Extra Credit</h2><ul><li>
Advanced experience with GCP IAM, Google Workspace IAM, AWS IAM, cross-account access patterns, and policy automation.</li><li>
Experience with Okta Workflows, SailPoint/IGA, or Privileged Access Management (PAM) solutions.</li><li>
Experience designing scalable authorization models for high-growth or distributed organizations.</li><li>
Certifications such as Okta Architect, Azure Identity Engineer, CISSP.</li><li>
Prior experience in SaaS, high-growth, or distributed engineering environments.</li></ul><h2 class="jobSectionHeader">
Perks</h2>
Handshake delivers benefits that help you feel supported&mdash;and thrive at work and in life. 
The below benefits are for full-time US employees.
Ownership: Equity in a fast-growing company 
Financial Wellness: 401(k) match, competitive compensation, financial coaching 
Family Support: Paid parental leave, fertility benefits, parental coaching 
Wellbeing: Medical, dental, and vision, mental health support, wellness stipend 
Growth: Learning stipend, ongoing development 
Remote &amp; Office: Internet, commuting, and free lunch/gym in our SF office 
Time Off: Flexible PTO, 15 holidays + 2 flex days 
Connection: Team outings &amp; referral bonuses
Explore our mission, values, and comprehensive US benefits at joinhandshake.com/careers.
Compensation Range: $176K - $220K</div>

Senior Security Engineer

FluidStack

<div><div><div>San Francisco, CA,Austin, TX
 </div></div><div>Full Time</div></div>
 <div><h1 class="jobSectionHeader">About Fluidstack</h1>
At Fluidstack, we build the compute, data centers, and power that will fuel artificial superintelligence. We supply GWs of compute capabilities to the world&rsquo;s biggest AI Labs at industry-defining speeds.
Our team is small, fast, and obsessed with quality. We own outcomes end-to-end, challenge assumptions, and treat our customers' problems as our own. No task is beneath anyone here.
There are a few thousand people who will shape the trajectory of superintelligence. Come and be one of them.
<h2 class="jobSectionHeader">About the Role</h2>
As an IT Engineer you will be working across identity, devices, SaaS platforms, and supporting end users. You should be organized, collaborative, and eager to learn while working within established systems and processes.
<ul><li>Provide reliable, hands-on IT support for our in office and remote employees by efficiently resolving Help Desk tickets while delivering excellent customer service.
</li><li>Support Fluidstack&rsquo;s MDM fleet comprising macOS, iOS, and Windows devices.
</li><li>Provide in office support by troubleshooting basic network issues and our A/V systems.
</li><li>Help manage and optimize Okta and our core SaaS tooling by administering and improving integrations and role-based access controls.
</li><li>Support daily procurement and asset management operations by coordinating hardware purchasing and tracking while maintaining accurate asset inventory and device assignments throughout their lifecycle (purchase to decommission).
</li><li>Help maintain clear, organized, and accessible IT documentation by creating easy-to-understand technical documentation for both technical and non-technical audiences.
</li><li>Contribute to IT initiatives by supporting project execution, managing priorities, and ensuring clear communication with stakeholders through regular updates.
</li><li>Help maintain a secure environment by supporting basic security hygiene to include access reviews and basic identity security tasks.
</li><li>Support onboarding and offboarding of Fluidstack employees and contractors.
</li><li>Support the IT team by creating simple, reliable automations that reduce manual work and improve operational efficiency.
</li></ul><h1 class="jobSectionHeader">Qualifications</h1>
<ul><li>Practical experience administering Okta, including users, groups, and basic app integrations (OIE a plus).
</li><li>Strong knowledge of Google Workspace, with some exposure to Office 365.
</li><li>Hands-on MDM experience with macOS and Windows, ideally with Iru (formerly Kandji).
</li><li>Ability to support macOS, iOS, and Windows devices.
</li><li>Familiarity with Atlassian tools (Jira, Confluence) for documentation and project management.
</li><li>Experience participating in procurement and asset management processes.
</li><li>Clear, concise technical writing skills for documentation and knowledge base content.
</li><li>Excellent communication and customer service abilities.
</li><li>Basic understanding of security principles and best practices.
</li></ul><h1 class="jobSectionHeader">Nice To Haves</h1>
<ul><li>Experience with no‑code/low‑code automation tools (Okta Workflows, n8n, Zapier, Workato, Tray.io).
</li><li>Scripting familiarity with common languages (Bash, PowerShell, Python).
</li><li>Exposure to security and compliance frameworks (SOC 2, ISO 27001, NIST, CIS, FedRAMP).
</li><li>Experience with AI tools, agents, MCPs, automations, and prompting. Fluidstack standardizes on Anthropic Claude and has OpenAI ChatGPT.
</li><li>HRIS integration experience with systems like Deel, Rippling, BambooHR, or Workday.
</li><li>Understanding of API integrations and webhooks, and how to use them effectively.
</li></ul><h1 class="jobSectionHeader">Salary &amp; Benefits</h1>
<ul><li>Competitive total compensation package (salary + equity).
</li><li>Retirement or pension plan, in line with local norms.
</li><li>Health, dental, and vision insurance.
</li><li>Generous PTO policy, in line with local norms.
</li></ul>The base salary range for this position is $90,000 - $150,000 per year, depending on experience, skills, qualifications, and location. This range represents our good faith estimate of the compensation for this role at the time of posting. Total compensation may also include equity in the form of stock options.
We are committed to pay equity and transparency.
Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans&rsquo; status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you did not receive a confirmation email, please email careers@fluidstack.io with your resume/CV, the role you've applied for, and the date you submitted your application- someone from our recruiting team will be in touch.</div>

IT Engineer

MrBeast

<div><div><h3 class="jobSectionHeader">About Us</h3>

Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson, popularly known as MrBeast, the most watched person in the world. Renowned for revolutionizing digital content creation, Beast Industries encompasses a diverse portfolio of ventures that extend far beyond its origins on YouTube. With a mission to entertain, inspire, and create significant social impact, Beast Industries operates across various domains including digital media, philanthropy, consumer products, and innovative business initiatives. At Beast Industries, we believe in the transformative power of digital media and its potential to entertain, educate, and effect positive change. Our commitment to innovation, creativity, and philanthropy drives us to explore new frontiers, create unforgettable experiences, and build a legacy that inspires future generations.</div>
Senior Embedded InfoSec Engineer

Primary: Bay Area (San Francisco/Peninsula) | Secondary: NYC
<h1 class="jobSectionHeader">
About Us</h1>

Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson, popularly known as MrBeast, the most watched person in the world. Renowned for revolutionizing digital content creation, Beast Industries encompasses a diverse portfolio of ventures that extend far beyond its origins on YouTube. With a mission to entertain, inspire, and create significant social impact, Beast Industries operates across various domains including digital media, philanthropy, consumer products, and innovative business initiatives. At Beast Industries, we believe in the transformative power of digital media and its potential to entertain, educate, and effect positive change. Our commitment to innovation, creativity, and philanthropy drives us to explore new frontiers, create unforgettable experiences, and build a legacy that inspires future generations.

Location: Bay Area (San Francisco / Peninsula) Reports to: Director of Engineering Team: Security
<h1 class="jobSectionHeader">
The Opportunity</h1>

We are building a first-of-its-kind consumer membership ecosystem from the ground up &mdash; and when you're serving 100M+ users security has to be built in from day one, not bolted on later. As our Senior Embedded InfoSec Engineer, you will be the foundational security hire on the Security team, embedded directly with product squads to ship features that are secure by design rather than secured after the fact.

This is a hands-on, build-with-the-team role. You'll own application security, run the pen testing program, and architect the controls that meet partner security requirements so the business can close deals and ship with confidence.
<h1 class="jobSectionHeader">
The Product</h1>

You will be the security anchor underneath a membership ecosystem anchored around the MrBeast audience. Your surface area spans every product squad and every partnership:
<ul>
<li>Application Security: Threat modeling, secure-by-default patterns, code review, and developer-facing tooling across the membership app, creator marketplace, and platform services.</li>
<li>Offensive Testing: A pen testing program you own end-to-end &mdash; internal red-team exercises, coordinated external engagements, and continuous validation against real attacker behavior.</li>
<li>Security Architecture: The control framework that lets us meet partner security requirements &mdash; and the architecture decisions that keep us ready for the next partner, not scrambling for them.</li>
</ul><h1 class="jobSectionHeader">What You'll Do</h1>
<ul><li>Embed directly with product squads &mdash; membership app, marketplace, data &amp; identity &mdash; to threat-model, review, and harden features before they ship.</li>
<li>Own the application security program end-to-end: secure SDLC, code review, dependency and supply-chain controls, and developer-facing security tooling.</li>
<li>Run the pen testing program &mdash; hands-on offensive work plus coordination of external engagements &mdash; and turn findings into fixed issues, not tickets in a backlog.</li>
<li>Architect the security controls and documentation that meet partner security requirements, so partnership deals close on our schedule.</li>
<li>Set the security baseline for a zero-to-one, AI-native stack: coding agents, model and prompt security, and the new attack surface that comes with AI-native products.</li>
<li>Write the playbook &mdash; standards, guardrails, and the &quot;paved road&quot; &mdash; so as the org scales, secure is the easy path.</li>
</ul><h1 class="jobSectionHeader">Who You Are</h1>
<ul><li>Embedded Builder: You've been the security engineer on a product team, not just a reviewer at the gate. You write code, file PRs, and ship fixes yourself when it's the fastest path.</li>
<li>AppSec at Consumer Scale: You've run or heavily contributed to an application security program inside a consumer product used by millions &mdash; you know the real tradeoffs between coverage, velocity, and risk.</li>
<li>Offensive Hands-On: You can pen test, not just read pen test reports. You've found real bugs in real systems and shepherded them through to fix.</li>
<li>Partner-Compliance Fluent: You've architected against partner security frameworks (or equivalents &mdash; SOC 2, PCI, vendor security reviews) and know how to translate requirements into real controls without theater.</li>
<li>AI-Native: You aren't just curious about AI; you are burning through tokens, using coding agents daily, and thinking about how AI changes both how we build and what we have to defend.</li>
<li>Scrappy &amp; Scaled: You have the startup experience to build from zero with a nimble team, plus the big-tech exposure to know what breaks when a product hits massive scale.</li>
</ul>
Action-Oriented: You thrive in ambiguity and prefer shipping controls over writing policy. You'd rather land a fix than run a meeting.<div><h3 class="jobSectionHeader">
Benefits</h3>
<h4 class="jobSectionHeader">The Perks, Why Work On the MrBeast Team</h4>

We are redefining what entertainment and storytelling look like at global scale. Every piece of content we publish reaches millions and influences culture in real time. This is your opportunity to lead the team that decides how those moments come to life across every screen.
<ul>
<li>Competitive Salary</li>
<li>Generous Medical (Blue Cross Blue Shield), Dental, Vision and company-paid Life Insurance</li>
<li>Company contributions to employee Health Savings Accounts (HSA)</li>
<li>401k Plan with Safe Harbor company-matching</li>
<li>Flexible vacation policy and paid company holidays</li>
<li>Company-provided technology package</li>
<li>Relocation assistance where applicable, including travel and company-provided housing for the first 90 days</li></ul></div></div>

Senior Embedded InfoSec Engineer

Hex Technologies

SF, NYC, or Remote (USA)
 About the role
 
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
 
About the role: 
Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
 Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
 Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
 Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
 Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
 Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
 Mentor engineers and advocate for cloud security across the organization.
 
About you: 
5+ years of experience in cloud security engineering, with extensive expertise in AWS.
 Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
 Expert-level knowledge and hands-on experience with Terraform.
 Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
 Familiarity with CNAPP solutions such as Wiz
 Familiarity with SIEM solutions such as Panther
 Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
 Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
 Bonus points for security certifications from SANS or OffSec.
 Excellent problem-solving, communication, and leadership skills.
 Our Engineering team
 
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
 
How we took down production…
 Beyond Linear Notebooks
 A pragmatic approach to live collaboration
 Our stack
 
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
 
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
 
The salary range for this role is: $200,000 - $265,000
 
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
 
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
 
About Hex
 
Hex is growing our team of builders on a mission to make everyone a data person. Our platform solves key pain points with today's data and analytics tooling, and empowers anyone to explore data using natural language, with or without code, on trusted context. Thousands of customers like Ramp, Figma, Stubhub, Anthropic, and Gamma love Hex for our beautiful UI, agentic superpowers, and boundless flexibility.
 
Hex has raised over $100M from leading investors like Sequoia, a16z, Snowflake and Amplify. With office hubs in San Francisco and New York, as well as remote team members throughout the US and UK, we're a high-agency team that ships fast and has fun doing it. Check out our Intro to Hex video and employee handbook to learn more about what it's like to work at Hex.

Cloud Security Engineer

Palo Alto Networks

<div><div>San Francisco, California, United States Product Engineering Ref ID: JR-017077</div><div> 
</div><div>Our Mission
At Palo Alto Networks&reg;, we&rsquo;re united by a shared mission&mdash;to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you&rsquo;re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you&rsquo;re in the right place.
Who We Are
In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!
We believe collaboration thrives in person. That&rsquo;s why most of our teams work from the office full time, with flexibility when it&rsquo;s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.
Job Summary
The Team
Cortex - Cortex is a world-leading cybersecurity platform that provides comprehensive security solutions to protect organizations from advanced threats. Our team is responsible for developing and maintaining the core components of the Cortex platform, including the data pipeline, analytics engine, and user interface. We are a fast-paced and innovative team that is passionate about building the best security products in the world.
Job Summary
We are seeking a Principal Backend Engineer to join our Cortex backend engineering group, a team dedicated to developing, innovating, and scaling the Cortex Platform. In this role, you will contribute to the core backend of Cortex products like XSOAR, XDR, and XSIAM, and shared infrastructures. We are looking for a passionate engineer with a can-do attitude who thrives on solving complex problems and delivering value to thousands of customers.
Key Responsibilities<ul><li>
Lead the end-to-end backend development of features and components, from design and development to testing, deployment, and maintenance.</li><li>
Collaborate effectively with peers across diverse teams and disciplines to shape solutions and ensure seamless integration with other product components.</li><li>
Drive team-wide technical excellence by actively participating in code reviews, design reviews, and architectural decisions.</li><li>
Maintain a production-first mindset, providing real-time mitigation and solutions to production issues to ensure platform stability and customer satisfaction.</li><li>
Challenge the status quo by exploring and applying new technologies and methodologies to innovate and scale the Cortex Platform.</li><li>
Simplify complex systems by designing and implementing elegant, scalable, and maintainable backend services.</li><li>
Mentor junior engineers, empowering others by sharing knowledge and fostering a culture of technical growth and accountability.</li></ul>
Qualifications
<div></div><div><div><div><div><div><div><div><div><div>Required Qualifications<ul><li>
Bachelor's or Master's degree in Computer Science or a related field, or equivalent experience.</li><li>
8+ years of professional software engineering experience, including the development of scalable server-side applications.</li><li>
Extensive hands-on programming skills in Go and/or Python.</li><li>
Proven experience with major cloud platforms (e.g., GCP, AWS, Azure).</li><li>
Deep understanding of and experience with Microservices architecture (e.g., Kubernetes, Docker, Serverless).</li><li>
Strong computer science fundamentals and experience with distributed computing concepts (e.g., CAP theorem, master election, distributed databases).</li></ul>
Preferred Qualifications<ul><li>
Experience with big-data architectures using technologies like Kafka, Splunk, or Flink.</li><li>
Hands-on experience with both SQL and NoSQL databases (e.g., BigQuery, Elasticsearch).</li><li>
Familiarity with CI/CD pipelines and infrastructure-as-code practices.</li><li>
Knowledge of cybersecurity, information security, or software security principles.</li></ul>
#LI-NP1
#LI-Hybrid</div></div></div></div></div></div></div></div></div>
Compensation Disclosure
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.<ul><li>/yr</li></ul>
Our Commitment
We&rsquo;re trailblazers that dream big, take risks, and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.</div></div>

Principal Software Engineer (Cortex Platform)

Aurora Innovation

<div><div>Who we are
<div>
Aurora's mission is to deliver the benefits of self-driving technology safely, quickly, and broadly.</div><div> 
The Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone.</div> 
<div></div>
<div>
At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech or follow us on LinkedIn.</div></div><div></div> 
What we are looking for

We're searching for a Senior Cloud Security Engineer. You will be part of the Cloud Security engineering team dedicated to building resilient, automated security systems at scale.

Cloud security collaborates with infrastructure and application teams closely. The areas we cover are infrastructure security, workload security, and CI/CD hardening.

Our team is dedicated to building resilient, automated systems at scale. We take a hybrid approach to our toolkit: we utilize the best of open-source (OPA, Trivy, Spire) and COTS products, while still writing custom code to automate workflows and harden our global digital integrity. You'll help us strike the perfect balance between leveraging existing solutions and building custom ones from the ground up.

In this role you will
<ul>
<li>Secure Aurora's cloud environment in the areas of but not limited to:</li>
<li><ul><li>Manage IAM roles and policies</li>
<li>Enforce security controls</li>
<li>Construct security boundaries for resources and services</li>
<li>Provide security guidance involving Cloud and Kubernetes</li>
</ul></li><li>Create automation to solve security problems at the root</li>
<li>Design, build, and configure security infrastructure clouds such as like AWS, Azure, or GCP</li>
<li>Manage the security posture of workloads deployed on Kubernetes environments</li>
</ul>
Required qualifications
<ul>
<li>5+ years of progressive experience in security engineering</li>
<li>Understanding of fundamental security concepts such as Authentication, Authorization, Zero-Trust, and their application to cloud native infrastructure and applications.</li>
<li>Hands-on experience in securing cloud and Kubernetes environments. Experience with Kubernetes admission controllers, vulnerability management, supply-chain security, network security, and use of mTLS and PKI to secure infrastructure.</li>
<li>Ability to design and implement security controls for Kubernetes, including strong knowledge of authorization models, admission controllers, and security best practices.</li>
<li>Understanding of modern Identity and Access Management (IAM) standards and technologies such as OAuth2/OIDC, SAML.</li>
<li>Proficiency in at least one modern programming/scripting language (e.g., Python or Go) for building security automation.</li>
<li>Experience writing and using Terraform.</li>
</ul>
Desirable qualifications
<ul>
<li>Deep fundamental understanding of enterprise-level network security, operating system (Linux), Kubernetes, CI/CD, and application security principles.</li>
<li>Familiarity with compliance frameworks (e.g., SOX, SOC 2, ISO 27001).</li>
<li>Familiarity with machine identity frameworks like SPIFFE/SPIRE, mTLS or equivalent.</li>
</ul>
The base salary range for this position is $162,000 - $235,000 per year. Aurora's pay ranges are determined by role, level, and location. Within the range, the successful candidate's starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.<div>
Working at Aurora 
At Aurora, we bring together extraordinarily talented and experienced people united by the strength of our values. We operate with integrity, set outrageous goals, and build a culture where we win together &mdash; all without any jerks.

We believe in-person work increases collaboration, empathy and our ability to lead effectively. As a result, we operate in a hybrid work environment where Aurorans are in office at least 3 days per week.

Our Careers page provides insight into what it is like to work at Aurora, and you can find all the latest updates in our Newsroom.

Our commitment to safety

At the core of everything we do is our commitment to safety. Building best-in-class self-driving technology will take time, and we believe that each employee at Aurora has a role in contributing to safety, every step of the way. Aurora expects commitment to our safety policies from every employee, and seeks candidates who take an active responsibility, can contribute to building an atmosphere of trust, and invest in the organization's long-term success by prioritizing working safely, no matter what.

Our commitment to inclusion

Aurora considers candidates without regard to their race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, pregnancy status, parent or caregiver status, ancestry, political affiliation, veteran and/or military status, physical or mental disability, or any other status protected by federal or state law. Aurora considers qualified applicants with criminal histories, consistent with applicable federal, state, and local law. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at careersiteaccommodations@aurora.tech.

For California applicants, information collected and processed as part of your application and any job applications you choose to submit is subject to Aurora's California Employment Privacy Policy.</div></div>

Senior Cloud Security Engineer

Explore 355+ It security engineer in San Francisco this May. Find roles across top companies and apply now to boost your career.