data engineer

software engineer

senior software engineer Jobs in San Francisco

senior software engineer

ai engineer

ai engineering lead Jobs in San Francisco

ai engineering lead

security engineer

EvenUp

<div>EvenUp is on a mission to close the justice gap using technology and AI. We empower personal injury lawyers and victims to get the justice they deserve. Our products enable law firms to secure faster settlements, higher payouts, and better outcomes for victims injured through no fault of their own in vehicle collisions, accidents, natural disasters, and more.
We are one of the fastest-growing vertical SaaS companies in history, and we are just getting started. EvenUp is backed by top VCs, including Bessemer Venture Partners, Bain Capital Ventures, SignalFire, and Lightspeed. We are looking to expand our team with talented, driven, and collaborative individuals who seek to have a lasting impact. Learn more at www.evenuplaw.com.<h3 class="jobSectionHeader">
Life as an Engineer at EvenUp
</h3>EvenUp&rsquo;s security team is growing rapidly to support the company&rsquo;s mission of ensuring personal injury victims receive fair compensation. With ambitious goals to double the size of our engineering team by the end of 2026, we are looking for a hands-on Senior Security Engineer to lead and scale our security efforts. You&rsquo;ll work across functions to design and maintain secure infrastructure, evaluating whether to build or buy solutions as we grow. Your work will be critical in safeguarding our AI-native document generation platform, trusted by attorneys with over $1.5B in damages claimed to date.
As a Senior Security Engineer at EvenUp, you will set security strategy, collaborate with cross-functional partners, and drive major initiatives that secure customer data, our products, and our company&rsquo;s reputation.<h3 class="jobSectionHeader"> 
What You'll Do</h3><ul><li>
Risk Management: Identify and address security risks through comprehensive assessments, mitigation strategies, and execution.</li><li>
Code and Network Security: Ensure secure coding and implement systems to protect against unauthorized access and data breaches.</li><li>
Incident Response: Develop and execute incident response plans, conduct forensic analysis, and take preventive measures.</li><li>
Compliance and Ethics: Maintain compliance with regulations and industry standards, promote transparency, and address ethical concerns.</li><li>
Continuous Monitoring: Establish real-time monitoring systems, conduct regular assessments, and proactively respond to threats.</li><li>
Vendor &amp; Third-Party Security: Evaluate and secure third-party integrations to prevent vulnerabilities.</li><li>
Security Training: Educate and raise awareness for security best practices across the engineering team.</li><li>
Documentation &amp; Reporting: Maintain up-to-date documentation on protocols, incidents, and improvements; report regularly to stakeholders.</li></ul><h3 class="jobSectionHeader">
What We Look For</h3><ul><li>
5+ years in a security-focused engineering role, with hands-on technical architecture, implementation, and oversight experience.</li><li>
Proven security experience at a startup or high-growth company - you've built or scaled a security function before, not just maintained one.</li><li>
Expertise in SAST/DAST, application security, and CI/CD pipeline integration.</li><li>
Deep knowledge of AI-specific threats (prompt injection, model poisoning, membership inference, adversarial perturbation, output manipulation).</li><li>
Experience implementing security principles, operating system and web application security, and familiarity with the OWASP Top 10 and common threat tactics.</li><li>
Knowledge of next-generation security technologies (SASE, CASB, RASP).</li><li>
Hands-on experience with patch management, software supply chain security, and artifact repositories (e.g., JFrog, Snyk).</li><li>
Strong programming or scripting skills in at least one language (e.g., Python, Ruby, Node.js)</li><li>
Relevant cybersecurity certification (CISSP, CISM, CISA, CRISC, GIAC, etc.).</li><li>
Up-to-date on technology and vulnerability trends; ability to secure cloud computing applications and ecosystems.</li><li>
Application/infrastructure-level security design experience, including modern mitigation techniques (e.g., DNS-SEC, cryptographic fundamentals).</li><li>
Strong automation skills with Python.</li></ul>
This is a hybrid role, with an expectation of being in our SF office three days per week.
#LI-Hybrid
Notice to Candidates:
EvenUp has been made aware of fraudulent job postings and unaffiliated third parties posing as our recruiting team &ndash; please know that we have no affiliation or connection to these situations. We only post open roles on our career page (evenuplaw.com/careers) or reputable job boards like our official LinkedIn or Indeed pages, and all official EvenUp recruitment emails will come from the domains @evenuplaw.com, @evenup.ai, @ext-evenuplaw.com, no-reply@ashbyhq.com or no‑reply@canditech.io email addresses.
To ensure fairness and proper consideration, we do not accept resumes or expressions of interest via email or social media messages. If you&rsquo;re interested in a role, please submit your application directly through our careers page.
If you receive communication from someone you believe is impersonating EvenUp, please report it to us at talent-ops-team@evenuplaw.com. Examples of fraudulent domains include &ldquo;careers-evenuplaw.com&rdquo; and &ldquo;careers-evenuplaws.com&rdquo;.
Benefits &amp; Perks:
As part of our total rewards package, we offer attractive benefits and perks to our employees, including:<ul><li>
Choice of medical, dental, and vision insurance plans for you and your family.</li><li>
Additional insurance coverage options for life, accident, or critical illness.</li><li>
Flexible paid time off, sick leave, short-term and long-term disability.</li><li>
10 US observed holidays, and Canadian statutory holidays by province.</li><li>
A home office stipend.</li><li>
401(k) for US-based employees and RRSP for Canada-based employees.</li><li>
Paid parental leave.</li><li>
A local in-person meet-up program.</li><li>
Hubs in San Francisco and Toronto.</li></ul>
Please note the above benefits &amp; perks are for full-time employees
EvenUp is an equal opportunity employer. We are committed to diversity and inclusion in our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Compensation Range: $185,100 - $250,430</div>

Senior Security Engineer

Hex Technologies

SF, NYC, or Remote (USA)
 About the role
 
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
 
About the role: 
Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
 Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
 Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
 Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
 Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
 Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
 Mentor engineers and advocate for cloud security across the organization.
 
About you: 
5+ years of experience in cloud security engineering, with extensive expertise in AWS.
 Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
 Expert-level knowledge and hands-on experience with Terraform.
 Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
 Familiarity with CNAPP solutions such as Wiz
 Familiarity with SIEM solutions such as Panther
 Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
 Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
 Bonus points for security certifications from SANS or OffSec.
 Excellent problem-solving, communication, and leadership skills.
 Our Engineering team
 
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
 
How we took down production…
 Beyond Linear Notebooks
 A pragmatic approach to live collaboration
 Our stack
 
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
 
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
 
The salary range for this role is: $200,000 - $265,000
 
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
 
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
 
About Hex
 
Hex is growing our team of builders on a mission to make everyone a data person. Our platform solves key pain points with today's data and analytics tooling, and empowers anyone to explore data using natural language, with or without code, on trusted context. Thousands of customers like Ramp, Figma, Stubhub, Anthropic, and Gamma love Hex for our beautiful UI, agentic superpowers, and boundless flexibility.
 
Hex has raised over $100M from leading investors like Sequoia, a16z, Snowflake and Amplify. With office hubs in San Francisco and New York, as well as remote team members throughout the US and UK, we're a high-agency team that ships fast and has fun doing it. Check out our Intro to Hex video and employee handbook to learn more about what it's like to work at Hex.

Cloud Security Engineer

OpenAI

About the Team
 
Security is foundational to OpenAI’s mission of ensuring that artificial general intelligence benefits all of humanity. As OpenAI builds and operates increasingly powerful systems, security helps make that progress durable, trustworthy, and resilient.
 
The Security team protects OpenAI’s technology, people, and products, but our role goes beyond defense alone. We help enable the infrastructure, research, and product work that powers frontier AI, bringing deep technical judgment and hands-on operational execution to some of the most important systems being built today. Our work is grounded in impact, pragmatism, and preparing for the security challenges that come with increasingly capable technology.
 
About the Role
 
We are seeking an experienced and highly technical Data Center Security Engineer to help secure the infrastructure behind OpenAI’s rapidly expanding data center footprint. This is a chance to work on high-consequence systems at the intersection of cybersecurity, critical infrastructure, and advanced AI, where strong technical judgment and careful execution have direct, lasting impact.
 
In this role, you will operate with substantial agency and ownership alongside a small team of data center security experts, driving security architecture, control validation, and defensive improvements across multiple, diverse environments, with particular emphasis on IT, Enterprise, ICS and Operational Technology (OT) networking. You will help define and raise the security bar for infrastructure programs already in flight while shaping how future deployments are secured from the start.
 
This role's preferred location is one of our OpenAI offices in San Francisco, Seattle, or New York City and relocation assistance is available. We are also open to considering candidates who are remote.
 
In this role, you will: 
Design and implement security controls that protect data center infrastructure across a growing global footprint, with particular focus on both OT and IT networking environments.
 
Partner closely with a small team of data center security specialists, as well as engineering, operations, and broader security teams, to deliver resilient and practical security outcomes.
 
Secure OT and IT networking environments through strong segmentation, access control, monitoring, hardening, and connectivity patterns suited to critical infrastructure.
 
Contribute to security architecture and design reviews for data center systems, including OT and IT networking, network segmentation, identity and access management, provisioning workflows, hardware and firmware trust boundaries, and operational safeguards.
 
Perform recurring audits, control assessments, and validation activities across OT and IT networking environments to ensure continued compliance against defined controls.
 
Drive ongoing evidence collection, gap tracking, and remediation follow-through so control deficiencies are identified quickly and closed durably.
 
Help define measurable security standards, control objectives, audit procedures, evidence requirements, and validation mechanisms for infrastructure and facility security programs.
 
Support security monitoring, incident response, and post-incident improvement efforts for data center, OT, and IT networking environments.
 
Work with suppliers, partners, and internal stakeholders to evaluate and reduce risks associated with third-party hardware, firmware, software, and operational dependencies.
 
Continually evolve the security of our data centers alongside changes in adversary activity, infrastructure complexity, and the increasing demands of OpenAI’s systems.
 
You might thrive in this role if you have: 
15+ years of experience in security, including meaningful hands-on experience securing large-scale infrastructure, industrial environments, or data center systems.
 
Deep expertise securing OT and IT networking environments in critical infrastructure settings, including segmentation strategies, remote access controls, asset visibility, and compensating controls for operational constraints.
 
Experience building audit or assurance programs that validate ongoing compliance with defined security controls, especially across OT and IT networking environments, rather than relying on one-time point-in-time reviews.
 
Strong cross-functional collaboration skills including the ability to partner effectively with internal and external stakeholders while operating with a high degree of autonomy.
 
Strong knowledge of security engineering and operations across network security, IAM and PAM, hardening, provisioning, monitoring, incident response, and secure lifecycle practices.
 
Experience protecting hyperscale, colocation, or hybrid infrastructure environments against sophisticated adversaries.
 
Familiarity with control and governance frameworks such as NIST, ISO 27001, or SOC 2, and the ability to translate them into concrete technical and operational requirements.
 
The ability to operate as a high-ownership individual contributor who influences through technical judgment, collaboration, and execution.
 
Clear written and verbal communication skills, including the ability to explain risk, controls, and tradeoffs to both technical and non-technical partners.
 
About OpenAI
 
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
 
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
 
For additional information, please see
 
OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement
 
.
 
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
 
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through
 
this form
 
. No response will be provided to inquiries unrelated to job posting compliance.
 
We are committed to providing reasonable accommodations to applicants with disabilities.
 
OpenAI Global Applicant Privacy Policy
 
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
 
Compensation
 
$234.4K – $385K + Offers Equity • Multiple Ranges

Data Center Security Engineer

Cresset

<div>About Cresset
Cresset is a firm built by clients, for clients. As an independent, award-winning multi-family office and private investment firm, we are reimagining the way wealth is experienced. Our purpose is to help ensure that both wealth and life are fully optimized*&mdash;integrated, intentional, and aligned with each client&rsquo;s vision of success.
We provide access to the caliber of talent, ideas, and investment opportunities typically available to the largest single-family offices and institutions. Our approach is personalized, entrepreneurial, and client-first.
Proudly owned by our clients and employees, Cresset was built to endure. We are creating a 100+ year firm&mdash;one focused on delivering an exceptional experience, not only for the families we serve but for the team that serves them. Our commitment to clients has earned recognition by Barron&rsquo;s and Forbes, listing us among the nation&rsquo;s top RIA firms. Cresset is guided by long-term relationships, shared success, and a belief that wealth should serve a life well lived. Learn more at www.cressetcapital.com.
Role Overview
We are seeking an experienced Director, Network Security Engineer with deep expertise in Netskope DLP to lead the design, implementation, and optimization of our enterprise data protection strategy. This role will be responsible for safeguarding sensitive data across cloud, web, email, and endpoint environments while enabling secure business operations.
The ideal candidate brings a combination of hands-on technical depth, strategic leadership, and cross-functional collaboration to mature and scale DLP capabilities across the organization.
Key Responsibilities<ul><li>
Lead the architecture, deployment, and management of DLP solutions
</li><li>Define and implement data protection policies, including data classification, discovery, and enforcement
</li><li>Oversee data monitoring and incident response processes related to data exfiltration and policy violations
</li><li>Collaborate with Security, IT, Legal, Compliance, and business units to align DLP controls with regulatory and business requirements
</li><li>Drive continuous improvement of DLP capabilities, including tuning policies to reduce false positives/negatives
</li><li>Provide technical leadership and mentorship to security engineers and analysts
</li><li>Integrate DLP with broader security ecosystem (CASB, SSE, SIEM, EDR, IAM, etc.)
</li><li>Develop and maintain metrics, dashboards, and reporting for DLP effectiveness and risk posture
</li><li>Support audits and compliance initiatives (e.g., GDPR, CCPA, HIPAA, PCI-DSS)
</li><li>Evaluate emerging technologies and recommend enhancements to the data protection program
</li></ul>Required Qualifications<ul><li>
5+ years of experience in cybersecurity, with a strong focus on Data Loss Prevention
</li><li>Expert-level experience with DLP (policy creation, deployment, troubleshooting, and optimization)
</li><li>Deep understanding of data classification frameworks and sensitive data types (PII, PHI, financial data, intellectual property)
</li><li>Experience implementing DLP across cloud (SaaS/IaaS), endpoints, and web traffic
</li><li>Strong knowledge of CASB/SSE architectures and cloud security principles
</li><li>Experience integrating DLP with tools such as SIEM, SOAR, EDR, and IAM platforms
</li><li>Familiarity with regulatory and compliance frameworks (GDPR, HIPAA, PCI, etc.)
</li><li>Strong analytical and problem-solving skills
</li></ul>Preferred Qualifications<ul><li>
Experience leading or managing security engineering teams or programs
</li><li>Certifications such as CISSP, CISM, CCSP, or industry certifications
</li><li>Experience with other DLP platforms (e.g., Symantec, Microsoft Purview, Forcepoint)
</li><li>Scripting or automation experience (Python, PowerShell, APIs)
</li><li>Experience in financial services or other highly regulated industries</li></ul>
<ul><li>Wealth Optimized, Life Elevated refers to the firm&rsquo;s philosophy and process in providing advisory and planning services and is not intended to convey a guarantee of results.</li></ul>
**Disclosures related to awards, recognitions, and rankings available here.
Cresset refers to Cresset Capital Management, LLC and its respective direct and indirect subsidiaries and controlled affiliates. For full list of Cresset subsidiaries and controlled affiliates, please see cressetcapital.com/disclosures/.</div>

DIRECTOR, NETWORK SECURITY ENGINEER

CRUSOE

<div>Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack &mdash; from electrons to tokens &mdash; to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.
We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that &mdash; with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.
We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved &mdash; people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.
If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.
About This Role
Crusoe is building the world&rsquo;s favorite AI-first cloud infrastructure. We are seeking a Staff Corporate Security Engineer to act as the principal architect for our corporate security posture.
In this role, you will move beyond tactical tool management to design high-assurance, preventative systems that safeguard our identity perimeter, global network, and SaaS ecosystem. As a senior technical leader, you will build a &ldquo;Secure by Default&rdquo; environment where security is seamlessly embedded into the employee experience.
What You&rsquo;ll Be Working On<ul><li>
Leading the design and implementation of Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) architectures, replacing legacy VPNs with identity-aware, perimeter-less access models</li><li>
Architecting preventative SaaS security across platforms such as Google Workspace, Slack, and Okta, including CASB controls to enforce data protection and monitor unauthorized applications or extensions</li><li>
Implementing Binary Authorization and device trust mechanisms, leveraging hardware-backed identity (e.g., TPM, Secure Enclave) to ensure only compliant devices can access corporate systems</li><li>
Designing and tuning Data Loss Prevention (DLP) controls across endpoints and SaaS platforms to protect intellectual property</li><li>
Strengthening email security posture, including MFA enforcement and session controls to mitigate phishing and session hijacking risks</li><li>
Architecting AI-native security frameworks, including governance and secure gateways for agent-based systems (e.g., MCP), ensuring all AI-driven actions are auditable and aligned with zero-trust principles</li><li>
Scaling identity and access management systems, including SSO, SAML, OAuth, SCIM, and designing Just-In-Time (JIT) access workflows to eliminate standing privileges</li><li>
Defining and executing a &ldquo;Crown Jewels&rdquo; security methodology, identifying and remediating high-risk vulnerabilities (e.g., IDOR, role-bypass) across critical systems</li></ul>
What You&rsquo;ll Bring to the Team<ul><li>
8+ years of experience designing and implementing Zero Trust, SASE, and modern identity-based security architectures</li><li>
Strong expertise in SaaS security, including CASB, DLP, and governance across platforms like Google Workspace, Okta, and Slack</li><li>
Experience implementing device trust, endpoint security, and hardware-backed identity solutions</li><li>
Strong understanding of identity and access management systems (SSO, SAML 2.0, OAuth, SCIM) and secure access patterns</li><li>
Knowledge of email security, phishing mitigation, and session security controls</li><li>
Experience identifying and mitigating application-layer vulnerabilities such as IDOR and privilege escalation risks</li><li>
Familiarity with emerging AI security challenges, including governance of agent-based systems and secure orchestration patterns</li><li>
Strong architectural mindset with the ability to design preventative, scalable security systems</li><li>
Excellent communication skills and ability to influence security decisions across engineering and business teams</li></ul>
Bonus Points<ul><li>
Experience implementing CASB platforms and enterprise DLP solutions at scale</li><li>
Familiarity with Model Context Protocol (MCP) or similar AI orchestration frameworks</li><li>
Experience building &ldquo;Secure by Default&rdquo; environments in high-growth organizations</li><li>
Background in cloud-native or AI infrastructure environment.</li></ul>
Benefits:<ul><li>
Competitive compensation and equity packages</li><li>
Restricted Stock Units</li><li>
Paid time off, paid holidays &amp; leave of absence programs</li><li>
Comprehensive health, dental &amp; vision insurance</li><li>
Employer contributions to HSA account</li><li>
Paid parental leave</li><li>
Paid life insurance, short-term and long-term disability</li><li>
Professional development &amp; tuition reimbursement</li><li>
Mental health &amp; wellness support</li><li>
Commuter benefits (parking &amp; transit)</li><li>
Cell phone stipend</li><li>
401(k) Retirement plan with company match up to 4% of salary</li><li>
Volunteer time off</li><li>
Global travel insurance &amp; emergency assistance</li><li>
Daily meals allowance</li><li>
Additional perks &amp; programs specific to location</li></ul>
Compensation Range
Compensation will be paid in the range of up to $210,000 - $255,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicants knowledge, education, and abilities, as well as internal equity and alignment with market data.
Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.</div>

Staff Corporate Security Engineer

Rippling

<div><h2 class="jobSectionHeader">About Rippling</h2>
Rippling gives businesses one place to run HR, IT, and Finance. It brings together all of the workforce systems that are normally scattered across a company, like payroll, expenses, benefits, and computers. For the first time ever, you can manage and automate every part of the employee lifecycle in a single system. 
Take onboarding, for example. With Rippling, you can hire a new employee anywhere in the world and set up their payroll, corporate card, computer, benefits, and even third-party apps like Slack and Microsoft 365&mdash;all within 90 seconds. 
Based in San Francisco, CA, Rippling has raised $1.4B+ from the world&rsquo;s top investors&mdash;including Kleiner Perkins, Founders Fund, Sequoia, Greenoaks, and Bedrock&mdash;and was named one of America's best startup employers by Forbes. 
We prioritize candidate safety. Please be aware that all official communication will only be sent from @Rippling.com addresses.<h3 class="jobSectionHeader"> 
About The Role</h3>
Rippling is looking for a hands-on Security Engineer &ndash; Offensive Security to join our growing security team. In this role, you&rsquo;ll design and execute offensive security initiatives that challenge our defenses, shape detection capabilities, and strengthen the resilience of a platform spanning HR, IT, Payments, Identity, and Infrastructure. 
As an early member of the Red Team, you&rsquo;ll apply an attacker&rsquo;s mindset across Rippling&rsquo;s people, processes, and technology&mdash;running realistic adversary simulations, uncovering vulnerabilities, and driving threat-informed defense across our most critical assets. This is a rare opportunity to have meaningful scope and visibility while building a program that influences company-wide security strategy. 
About The Team
Our security engineering team is a diverse group of builders, breakers, and problem solvers. We partner closely with Engineering to design scalable solutions and rethink traditional security models for a rapidly growing ecosystem.
We recently shared our work at:<ul><li>
Our Infrastructure Security team shared a blog about how they streamlined AWS access</li><li>
We spoke at BSides SF about attacking and defending infrastructure with terraform</li><li>
Our Product Security Director talked about the Strategies to Scale Security in Expanding Organizations</li></ul> 
What You'll Do<ul><li>
Design and execute covert Red Team operations to measure Rippling&rsquo;s readiness against advanced adversaries</li><li>
Conduct threat emulation, assumed breach, and purple team exercises across cloud infrastructure, endpoints, applications, and identity systems</li><li>
Build custom tooling and automation to accelerate offensive operations and reduce manual effort</li><li>
Partner with Blue Teams to improve detection and response engineering, aligning with MITRE ATT&amp;CK and real-world TTPs</li><li>
Influence security investment and prioritization across Engineering, Operations, Finance, and Sales through threat-informed insights</li><li>
Lead post-engagement debriefs with technical teams and senior leadership, translating risk into clear, actionable recommendations</li></ul><h2 class="jobSectionHeader">
Qualifications</h2><ul><li>
2+ years in an offensive security or Red Team role (or equivalent hands-on experience)</li><li>
Demonstrated ability to break down complex problems into measurable, solvable components</li><li>
Proficiency in scripting (Python, PowerShell, Bash) and building Red Team tooling</li><li>
Experience automating offensive workflows and comfort with software development practices</li><li>
Hands-on experience with C2 frameworks (Cobalt Strike, Mythic, or custom-built alternatives)</li><li>
Deep understanding of attacker TTPs and common detection/response patterns</li><li>
Experience conducting or guiding cross-team architectural changes to reduce systemic risk</li><li>
Familiarity with cloud environments (AWS), SaaS ecosystems, and modern identity systems (SSO, OAuth, SAML, MFA)</li><li>
Excellent written and verbal communication, with the ability to translate technical risk for non-technical stakeholders</li></ul><h2 class="jobSectionHeader">
Additional Information</h2>
Rippling is an equal opportunity employer. We are committed to building a diverse and inclusive workforce and do not discriminate based on race, religion, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, veteran or military status, or any other legally protected characteristics, Rippling is committed to providing reasonable accommodations for candidates with disabilities who need assistance during the hiring process. To request a reasonable accommodation, please email accommodations@rippling.com.
Rippling highly values having employees working in-office to foster a collaborative work environment and company culture. For office-based employees (employees who live within a defined radius of a Rippling office), Rippling considers working in the office, at least three days a week under current policy, to be an essential function of the employee's role.
This role will receive a competitive salary + benefits + equity. The salary for US-based employees will be aligned with one of the ranges below based on location; see which tier applies to your location here.
A variety of factors are considered when determining someone&rsquo;s compensation&ndash;including a candidate&rsquo;s professional background, experience, and location. Final offer amounts may vary from the amounts listed below. 
The pay range for this role is: 
135,000 - 236,250 USD per year(US Tier 1) 
121,500 - 212,625 USD per year(US Tier 2) 
114,750 - 200,813 USD per year(US Tier 3)</div>

Security Engineer II, Offensive Security

Veryon

<div>Description:

About Veryon
Veryon is the leading global provider of aviation software and information services, trusted by over 5000+ customers, 75,000 maintenance professionals, and 100+ OEMs across nearly 150 countries. Our mission is to deliver smarter, predictive technology solutions, including our AI platform, Veryon AIRE that maximizes aircraft uptime and operational efficiency for the world&rsquo;s most demanding aviation organizations.
At?Veryon, we are an?AI-forward company?focused on driving innovation and efficiency through emerging technologies. We prioritize hiring individuals who embrace AI, think creatively about its application, and are excited to continuously evolve alongside it.???
About the Role
We are seeking a Security Engineer I to help support the day to day operation and improvement of our security program, with a heavier focus on hands on implementation work across infrastructure, cloud, and core security tooling. This role will help close the gap between identifying security issues and getting the technical changes needed implemented.
This role will support security operations work such as alert and incident investigation, but a large part of the job will also be helping with infrastructure vulnerability remediation, cloud security configuration, administration of security tools, implementation of network and edge security controls, and general engineering support for security initiatives. This is an entry level role, but it is best suited for someone who wants real hands on technical exposure and is interested in learning how security work gets operationalized across cloud, infrastructure, compliance, and engineering.
 
 
Key Responsibilities<ul><li>
Configure and administer XDR(dashboard configurations, alert tuning, agent update coordination).</li><li>
Monitor, triage, and help investigate security alerts and incidents, including phishing, endpoint, and XDR related activity</li><li>
Assist with Harmony SASE policy exclusions, visibility improvements, troubleshooting, and general support of user traffic security controls</li><li>
Help with cloud security configuration reviews, hardening efforts, and reduction of unnecessary exposure across the environment (finding exposed endpoints, possible attack paths, etc and researching a solution to fix the risk.)</li><li>
Takes initiative to find ways to automate workflows.
</li><li>Support security driven technical remediation tied to compliance and audit related initiatives, including SOC 2, ISO 27001, and ISO 42001 efforts(gathering evidence, researching and planning remediations, etc)</li><li>
Work with IT, DevOps, engineering, and other internal teams to help move security recommendations into actual implemented changes</li><li>
Document procedures, findings, technical changes, and remediation work clearly and accurately</li><li>
Verification of security findings from customers and vulnerability reports.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field
</li><li>Internship, labs, projects, and/or up to 3 years of hands on experience in IT, software development, system administration, or network administration
</li><li>Experience with scripting or automation using Python, PowerShell, or similar languages
</li><li>Experience with basic network administration, system administration, software development or IT support.</li><li>
Exposure to basic phishing email analysis and EDR/XDR alert triage.</li><li>
Understanding of secure coding best practices such as OWASP top 10</li><li>
Understanding of Cloud security best practices</li><li>
Understanding of the incident response lifecycle</li><li>
Great communication skills</li></ul>
Preferred Qualifications:<ul><li>
Security+, CySA+, OSCP or other related certification</li><li>
Hands on Azure or AWS administration
</li><li>Experience with infrastructure as code</li><li>
Experience with vulnerability management</li><li>
Experience delivering and seeing projects through completion
</li></ul>Our Core Values:<ul><li>
Fueled by Customers: Customers are at the core of every decision.</li><li>
Win Together: Collaboration is our competitive edge.</li><li>
Make It Happen: No excuses. Just outcomes.</li><li>
Innovate to Elevate: We boldly challenge what&rsquo;s standard and lift what&rsquo;s possible.</li></ul></div>

SecOps Engineer

Explore 97+ Security engineer in San Francisco this April. Find roles across top companies and apply now to boost your career.