Post job

Cyber security analyst jobs in Oakland, CA - 982 jobs

All
Cyber Security Analyst
Security Engineer
Security System Engineer
Information Security Engineer
Senior Security Analyst
Senior Security Engineer
  • Information Security Engineer, Bare Metal

    Fluidstack

    Cyber security analyst job in San Francisco, CA

    At Fluidstack, we're building the infrastructure for abundant intelligence. We partner with top AI labs, governments, and enterprises - including Mistral, Poolside, Black Forest Labs, Meta, and more - to unlock compute at the speed of light. We're working with urgency to make AGI a reality. As such, our team is highly motivated and committed to delivering world‑class infrastructure. We treat our customers' outcomes as our own, taking pride in the systems we build and the trust we earn. If you're motivated by purpose, obsessed with excellence, and ready to work very hard to accelerate the future of intelligence, join us in building what's next. About the Role The Information Security Engineer, Bare Metal will be a critical part of the infrastructure team, responsible for designing, implementing, and maintaining the security of Fluidstack's bare metal fleet. This role is highly technical and requires deep expertise in hardware, operating systems, and network security in a high-scale, high-performance environment. Key Responsibilities: Bare Metal Lifecycle Security: Own the security throughout the entire lifecycle of the bare metal fleet, from provisioning and hardening to decommission. Image Security and Hardening: Design and implement secure, hardened base operating system images (Linux) for all production and development environments, including automated vulnerability scanning and patch management. Baseboard Management Controller (BMC) Security: Define and enforce security best practices for BMCs, including access controls, credential management, logging, and firmware integrity/patching. Network Security: Collaborate with network engineering to design and implement secure network architectures, including micro‑segmentation, intrusion detection/prevention systems (IDS/IPS), and firewall policies for the bare metal environment. Storage and Data Protection: Implement strong security controls for storage systems, focusing on data‑at‑rest encryption, key management, and secure access protocols for both local and networked storage. Automation: Develop security automation and tooling (e.g., configuration management scripts) to ensure security is enforced consistently and at scale across the fleet. Security Monitoring and Incident Response: Configure and manage security monitoring for bare metal infrastructure and participate in the incident response process for critical security events. Security Review: Conduct regular security audits and threat modeling exercises for new hardware and infrastructure designs. Focus Securing and hardening base images (Linux/OS). Baseboard Management Controller (BMC) access control and firmware security. Infrastructure network segmentation and policy enforcement. Storage encryption, data integrity, and key management. About You 7+ years of experience in an Information Security or Infrastructure Engineering role, with a strong focus on bare metal, IaaS, or high‑scale cloud infrastructure. Deep practical experience with Linux operating system hardening (e.g., SELinux, AppArmor, kernel‑level security). Expert‑level knowledge of network security principles, including TCP/IP, VPNs, firewall rulesets, and zero‑trust concepts. Proven ability to implement and manage encryption technologies, including disk‑level encryption (e.g., LUKS) and hardware‑level encryption. Strong scripting and automation skills in languages such as Python, Go, or Rust, and experience with configuration management tools (e.g., Ansible, Puppet, Chef). Understanding of hardware security modules (HSMs) and trusted computing concepts (e.g., TPM/TXT). Excellent problem‑solving and communication skills, with the ability to work collaboratively across engineering teams. Nice to Haves Experience with specific BMC platforms (e.g., OpenBMC, Dell iDRAC, HPE iLO). Familiarity with compliance standards relevant to bare metal environments (e.g., SOC 2, ISO 27001, FedRAMP). Experience with hardware‑level root of trust and secure boot implementations. Relevant security certifications (e.g., CISSP, OSCP, CEH). Salary & Benefits Competitive total compensation package (salary + equity). Retirement or pension plan, in line with local norms. Health, dental, and vision insurance. Generous PTO policy, in line with local norms. The base salary range for this position is $150,000 - $250,000 per year, depending on experience, skills, qualifications, and location. This range represents our good faith estimate of the compensation for this role at the time of posting. Total compensation may also include equity in the form of stock options. We are committed to pay equity and transparency. Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law. . #J-18808-Ljbffr
    $150k-250k yearly 3d ago
  • Job icon imageJob icon image 2

    Looking for a job?

    Let Zippia find it for you.

  • Senior Security GRC Analyst

    Lambda Inc. 4.2company rating

    Cyber security analyst job in San Francisco, CA

    Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU. If you'd like to build the world's best AI cloud, join us. Note: This position requires presence in our San Francisco or San Jose office location 4 days per week; Lambda's designated work from home day is currently Tuesday. What You'll Do Validate and verify the organization's security controls and practices meet the requirements of ISO 27001, 27701, PCI, SOC 2 and other relevant regulatory requirements to ensure alignment to business objectives Manage IT Risk Register including risk identification, tracking, and prioritization. Assist with and drive remediation of control deficiencies and gaps Provide guidance to Control Owners in the planning, design, implementation, operation, maintenance & remediation of control activities and other supporting requirements (e.g. policies, standards, processes, system configurations, etc.) Communicate with technical and non-technical stakeholders and leaders on cybersecurity risk and controls management topics and program-specific reporting Assist with the Customer Trust program which may include managing customer assessments, and security questionnaires Assist control owners with root cause analysis and track risk management action plan progress. Create risk metrics for management regarding information security control maturity, compliance status, risks, performance and findings Assist with the third-party risk management assessment process, ensuring consistent enforcement of information security requirements You Have a minimum of 8 years of experience supporting cybersecurity risk or controls management programs with in-depth knowledge and experience of cybersecurity frameworks including ISO 27001 and 27701, PCI-DSS, SOC, NIST CSF and other regulatory requirements Have experience managing and running audits, certification programs and control assessments. This includes but is not limited to scope planning, defining control procedures based on requirements, policies and standards, control testing, and mapping issues to risks Have experience collaborating closely with engineers, business teams, and security partners, including incident response, red teams, and architects to seamlessly incorporate cybersecurity controls and risk management processes into their day-to-day operations Possess a strong ability to define, drive and execute a program vision, strategy, approach and milestones in alignment with organization priorities and initiatives Nice to Have Experience in the machine learning or computer hardware industry Experience with Security by Design and/or Privacy by Design principles Experience with standard cyber controls frameworks, including CIS Top18, NIST Cyber Security Framework (CSF), NIST 800.53, NIST 800.171, CMMC, Cybersecurity Maturity Model Certification (CMMC), ISO 27001 and 27701, and SOX ITGC control frameworks. Broad knowledge of IT infrastructure and architecture of computer systems as well as exposure to a variety of platforms such as operating systems, networks, databases, and ERP systems Familiarity with using third‑party tools such as Audit Board, Whistic, RSA Archer, ServiceNow for third‑party risk management Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) Certified in Risk and Information Systems Control (CRISC) Experience in the AI infrastructure, machine learning and/or computer hardware industry Salary Range Information The annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description. About Lambda Founded in 2012, with 500+ employees, and growing fast Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In‑Q‑Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG Our values are publicly available: ************************* We offer generous cash & equity compensation Health, dental, and vision coverage for you and your dependents Wellness and commuter stipends for select roles 401k Plan with 2% company match (USA employees) Flexible paid time off plan that we all actually use A Final Note: You do not need to match all of the listed expectations to apply for this position. We are committed to building a team with a variety of backgrounds, experiences, and skills. Equal Opportunity Employer Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law. #J-18808-Ljbffr
    $127k-172k yearly est. 5d ago
  • Security Engineer, Spam & Abuse, Level 5

    Minimal

    Cyber security analyst job in Palo Alto, CA

    is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together. The Company's three core products are , a visual messaging app that enhances your relationships with friends, family, and the world; , an augmented reality platform that powers AR across Snapchat and other services; and its AR glasses, .teams build fun and technically sophisticated products that reach hundreds of millions of Snapchatters around the world, every day. We're deeply committed to the well-being of everyone in our global community, which is why are at the root of everything we do. We move fast, with precision, and always execute with privacy at the forefront.Snap Inc. is seeking a Security Engineer to join our Spam & Abuse team!What you'll do:* Architect and lead the development of scalable, innovative solutions to detect and mitigate spam & abuse threats, leveraging state-of-the-art technologies and methodologies.* Drive cross-functional initiatives by collaborating with engineering, product management, and operations teams to create robust, proactive defenses against spam, abuse, and account takeover.* Take ownership of high-impact, complex projects, from inception to deployment, ensuring alignment with Snap's technical and business objectives.* Lead incident response efforts for spam and abuse-related security events, establishing processes for continuous improvement.* Mentor and provide technical leadership to engineers across teams, fostering a culture of learning and growth.* Define and drive the technical strategy and roadmap for spam and abuse detection and prevention systems.Knowledge, Skills & Abilities:* Demonstrated leadership and impact in combating spam, abuse, or related security domains.* Expertise in software engineering, with proficiency in programming languages such as Golang and Python.* Strong background in big data technologies, such as BigQuery.* Proven ability to lead and execute large-scale technical initiatives across multiple teams.* Excellent cross-team collaboration, communication, and stakeholder management skills.* Deep understanding of user privacy, security, and ethical considerations in the context of abuse prevention.Minimum Qualifications:* Bachelor's degree in Computer Science, Engineering, Information Systems, or equivalent experience.* 6+ years of post-Bachelor's software development experience; or Master's degree in a technical field + 5+ year of post-grad software development experience; or PhD in a relevant technical field +2+ years of post-grad software development experience* Extensive experience designing and deploying production-quality software solutions at scale.* Proven track record in leading the development of systems to detect and mitigate spam, abuse, or other forms of malicious behavior.Preferred Qualifications:* Proven leadership in designing and deploying scalable systems for security operations, with measurable impact on organizational security goals.* Experience driving organizational change by developing and evangelizing new frameworks or processes for combating emerging threats.* Strong strategic thinking, with a demonstrated ability to define technical roadmaps and lead multi-team initiatives.* Experience collaborating with executive leadership to align technical solutions with business priorities and risk management strategies.* A track record of mentoring senior engineers, fostering a culture of technical excellence and innovation.If you have a disability or special need that requires accommodation, please don't be shy and provide us some ."Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week. At Snap, we believe that having a team of diverse backgrounds and voices working together will enable us to create innovative products that improve the way people live and communicate. Snap is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state, and local laws. EOE, including disability/vets.We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, where applicable).: Snap Inc. is its own community, so we've got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap's long-term success!CompensationIn the United States, work locations are assigned a pay zone which determines the salary range for the position. The successful candidate's starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The starting pay may be negotiable within the salary range for the position.These pay zones may be modified in the future.:The base salary range for this position is $209,000-$313,000 annually.:The base salary range for this position is $199,000-$297,000 annually.:The base salary range for this position is $178,000-$266,000 annually.This position is eligible for equity in the form of RSUs. #J-18808-Ljbffr
    $209k-313k yearly 2d ago
  • Product Security Engineer

    Menlo Ventures

    Cyber security analyst job in San Francisco, CA

    At Skild AI, we are building the world's first general purpose robotic intelligence that is robust and adapts to unseen scenarios without failing. We believe massive scale through data-driven machine learning is the key to unlocking these capabilities for the widespread deployment of robots within society. Our team consists of individuals with varying levels of experience and backgrounds, from new graduates to domain experts. Relevant industry experience is important, but ultimately less so than your demonstrated abilities and attitude. We are looking for passionate individuals who are eager to explore uncharted waters and contribute to our innovative projects. Position Overview You will lead the design and execution of both technical security controls and foundational security programs. This is a highly visible, cross-functional role that requires deep technical fluency and strong ownership. You will review critical systems and source code, build internal security tooling, design and enforce access and secrets management controls, and work closely with engineering and operations teams to strengthen our security posture as the company scales. Responsibilities Partner with engineering to drive secure-by-design architecture and conduct in-depth reviews of application source code and systems Lead threat modeling and vulnerability analysis efforts, identifying systemic risks and influencing long-term mitigations Embed with product teams to champion secure coding and deployment practices, and shape platform-wide guardrails that reduce developer burden Design and own foundational security infrastructure, including secrets management, automated certificate/key rotation, and secure service bootstrapping Build and scale automated security scanning pipelines (SAST, DAST, SBOM, OSS license scanning) integrated into CI/CD workflows Drive third-party risk management, including deep-dive assessments of external hardware, software, and cloud service vendors Preferred Qualifications Strong software engineering background with 5+ years of hands-on development experience Deep understanding of networking fundamentals Extensive experience with Linux-based systems Strong understanding of applied cryptography, including key exchange, symmetric/assymetric keys, and digital signatures Extensive experience implementing access control in Cloud (AWS preferred) Comfort working across disciplines: Infra, eng, GRC, legal, and vendors Nice to haves Experience working with physical devices, such as SBCs and embedded systems Experience working in a fast paced startup, especially as the first security hire Experience with confidential computing technologies, including Intel SGX/TDX, AMD SEV, ARM TrustZone, OP-TEE, and AWS Nitro Enclaves Experience with full disk encryption (FDE) and securing interfaces (USB, JTAG, UART) Regularly follows security advisories, technical blogs, and leading conferences (e.g., Black Hat, DEF CON, USENIX) to stay informed on emerging threats and trends. Base Salary Range$100,000-$300,000 USD #J-18808-Ljbffr
    $100k-300k yearly 3d ago
  • Security Engineer, Gen AI Meta

    Isc2 Eastbay Chapter

    Cyber security analyst job in Menlo Park, CA

    Meta's Product Security team is responsible for finding, mitigating, and preventing security flaws across Meta's family of products, including Facebook, Messenger, Instagram, and WhatsApp. We are looking for a Security Engineer to join GenAI Product Security team to secure Meta AI products and product integrations. Work directly with Meta Superintelligence Labs and other product groups to set secure design standards and build technology to scale and implement protections for novel and evolving agentic security risks. Security Engineer, GenAI Responsibilities Influence and align the organization's vision and strategy, while engaging our teams to develop and deliver specific, multi-year roadmaps, programs, and projects. Ensure prioritization, resourcing, and timely delivery of this work within a changing business environment Design and implement novel security solutions to protect against AI risks such as prompt injections where no industry standard exists Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities Bug Bounty: help provide technical guidance to our world class bug bounty program and independent security researchers Industry Impact: push the industry forward through conference talks and open source projects to contribute broadly to security for the world Minimum Qualifications B.S. or M.S. Computer Science, Engineering, or related technical discipline, or equivalent experience 10+ years experience dealing with security issues web programming languages, development practices, and common bug patterns Experience developing and delivering information on program status for senior leadership Experience leading and managing complex cross‑functional programs Experience with exploiting common security vulnerabilities Preferred Qualifications Experience contributing to the security community (public research, blogging, presentations, etc.) Experience writing software that enables security processes For those who live in or expect to work from California if hired for this position, please clickherefor additional information. About Meta Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today-beyond the constraints of screens, the limits of distance, and even the rules of physics. $213,000/year to $293,000/year + bonus + equity + benefits Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta. Equal Employment Opportunity Meta is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. You may view our Equal Employment Opportunity noticehere. Meta is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, fill out the Accommodations request form. #J-18808-Ljbffr
    $213k-293k yearly 1d ago
  • AI Security Engineer

    Pantera Capital

    Cyber security analyst job in San Francisco, CA

    Perplexity is an AI-powered answer engine founded in December 2022 and growing rapidly as one of the world's leading AI platforms. Perplexity has raised over $1B in venture investment and aims to build accurate, trustworthy AI that powers decision-making for people and assistive AI wherever decisions are made. Perplexity is seeking a highly skilled, experienced, and hands-on AI Security Engineer to join our security team, driving the protection of next-generation AI systems against adversarial threats. In this role, you'll design and implement robust mechanisms to secure self-hosted models, LLM APIs, agents, MCPs, and the core AI stack. You'll empower developers with tools and guidance, as well as technical contributions, enabling innovation while ensuring AI security is strong by default. Our tech stack includes Python, NextJS, TypeScript, Docker, AWS, Kubernetes, and PostgreSQL. Responsibilities Define, build, and refine mechanisms to secure AI systems (including self-hosted models, LLM APIs, agents, MCPs, and other core components of the AI stack) against adversarial behavior of all kinds Understand technically complex AI systems, identify potential weaknesses in their architecture, and implement improvements At least 50% of time performing hands-on remediation. Also working closely with peer engineers to drive remediations Plan and carry out threat modeling activities and realistic threat simulations across our offerings Conduct cybersecurity evaluations and lead AI security assessments in a cross-functional environment Develop initiatives that improve our capabilities to effectively evaluate AI systems and enhance the organization's prevention, detection, response, and threat hunting capabilities Provide guidance and education to developers to help deter and prevent threats Qualifications Hands-on coding and prompting experience. Bachelor of Science or Master of Science in Computer Science or a related field, or equivalent experience Be a technical and process subject matter expert regarding AI security services and attacker tactics, techniques, and procedures Good understanding of LLMs, AI architecture patterns, machine learning models, and related technologies such as MCP Understanding of application security principles and secure coding practices Experience developing and implementing security procedures and policies Strong problem-solving, project management, leadership, and communication skills Self-motivated with a willingness to take ownership of tasks 4+ years of industry experience The cash compensation range for this role is $200,000 - $280,000. Final offer amounts are determined by multiple factors, including experience and expertise, and may vary from the amounts listed above. Equity: In addition to the base salary, equity may be part of the total compensation package. Benefits: Comprehensive health, dental, and vision insurance for you and your dependents. Includes a 401(k) plan. #J-18808-Ljbffr
    $200k-280k yearly 1d ago
  • Senior Cloud Security Engineer - Infrastructure

    Klaviyo Inc. 4.2company rating

    Cyber security analyst job in San Francisco, CA

    A tech company in San Francisco is seeking a Lead Security Engineer to enhance its security posture across various environments. The ideal candidate will have over 5 years of experience in security roles and expertise in cloud security, IAM, and secure systems design. Responsibilities include implementing scalable security controls and collaborating with cross-functional teams. The base pay range for this position is $220,000 - $330,000 USD. #J-18808-Ljbffr
    $220k-330k yearly 2d ago
  • Blockchain Systems Engineer - Cross-Chain & Secure APIs

    P2P 3.2company rating

    Cyber security analyst job in San Francisco, CA

    A blockchain technology company is seeking a Software Engineer in San Francisco to design and build core infrastructure. Responsibilities include developing secure distributed systems and collaborating with teams to enhance blockchain accessibility. The role offers competitive compensation, autonomy in work, and opportunities for international candidates with visa sponsorship. A minimum salary range of $150,000 - $190,000 is provided. #J-18808-Ljbffr
    $150k-190k yearly 4d ago
  • Enterprise IT Engineer - Identity, Security & Cloud

    Arena Intelligence

    Cyber security analyst job in San Francisco, CA

    A leading tech company in San Francisco is seeking an experienced Enterprise IT Engineer to manage and secure their systems. This role will involve shaping the identity access foundation, administrating SaaS tools, and optimizing workflows. The ideal candidate will have 4-6 years in IT security, deep knowledge of Okta and Google Workspace, and the ability to work effectively in a fast-paced environment. They offer competitive compensation and comprehensive health benefits. #J-18808-Ljbffr
    $111k-158k yearly est. 2d ago
  • Security Engineer: AI/ML Systems & Zero-Trust Defense

    Magic 4.6company rating

    Cyber security analyst job in San Francisco, CA

    A cutting-edge tech firm located in San Francisco is seeking a Security Engineer to lead the development of security tools and safeguard systems from unauthorized access. The ideal candidate will possess significant experience in security software engineering, demonstrate strong software engineering skills, and be ready for on-call duties. This role offers competitive compensation, including a substantial salary, equity, and comprehensive benefits. Join us to help protect our innovative AI solutions while working within a collaborative and focused environment. #J-18808-Ljbffr
    $115k-166k yearly est. 2d ago
  • Application Security Engineer

    Monograph

    Cyber security analyst job in San Francisco, CA

    Our mission is to modernize the payments infrastructure for trucking and logistics. We're building Stripe for Transportation, centering our customers in every way and offering them world-class customer experience. We have a strong founding team with backgrounds in payments, autonomous vehicles, and leading technology companies. We've raised $125 million+ from investors and have been named to Forbes' annual Next Billion-Dollar Startup List. Job Description AtoB is looking to hire a dedicated Application Security Engineer to join our small security team. You'll work cross-functionally with backend, frontend, DevOps, product, and compliance teams to push security forward in every part of our stack. Responsibilities Design and implement security tooling, automation, and processes to support secure development, deployment, and operations Perform threat modeling, design reviews, and security assessments (API, web, mobile, microservices) Conduct secure code reviews, dynamic and static application security testing, and penetration testing Work closely with engineering teams to remediate identified security issues and embed secure practices in SDLC Investigate and respond to application-level security incidents or suspicious behavior Help define and enforce security standards, policies, and best practices across the engineering organization Maintain and improve application security infrastructure Stay abreast of new threats, vulnerabilities, and relevant industry practices and share knowledge Requirements 4+ years of experience securing web and/or API-based applications in a production setting Hands-on experience with static analysis (SAST), dynamic analysis (DAST), interactive application security testing (IAST) or similar tools Experience performing manual code reviews in languages like Java, Python, Go, JavaScript/TypeScript Understanding of common web / API vulnerabilities (OWASP Top 10, API abuses, SSRF, injection, XSS, deserialization, etc.) Familiarity with authentication & authorization mechanisms (OAuth2/OIDC, JWT, session management, RBAC, etc.) Experience integrating security into a CI/CD pipeline (GitHub Actions, GitLab CI, Jenkins, CircleCI, etc.) Working knowledge of cloud platforms (AWS, GCP, Azure) and container/orchestration (Docker, Kubernetes) Strong problem-solving skills, ability to operate in ambiguity and drive security outcomes in fast-moving teams Excellent communication skills Compensation Range: $180K - $200K We are an equal opportunities employer and welcome applications from all qualified candidates. #J-18808-Ljbffr
    $180k-200k yearly 5d ago
  • Infrastructure Security Engineer

    Harvey 4.5company rating

    Cyber security analyst job in San Francisco, CA

    Why Harvey At Harvey, we're transforming how legal and professional services operate - not incrementally, but end-to-end. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we're reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. With 700+ customers in 58+ countries, strong product-market fit, and world-class investor support, we're scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth - personal, professional, and financial - is unmatched. Our team is sharp, motivated, and deeply committed to the mission. We move fast, operate with intensity, and take real ownership of the problems we tackle - from early thinking to long-term outcomes. We stay close to our customers - from leadership to engineers - and work together to solve real problems with urgency and care. If you thrive in ambiguity, push for excellence, and want to help shape the future of work alongside others who raise the bar, we invite you to build with us. At Harvey, the future of professional services is being written today - and we're just getting started. Role Overview Some of the world's largest companies and their law firms use Harvey's AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex challenges in less time. Security is at the heart of what we do. Our customers trust us with their most sensitive data, and we take that responsibility seriously. As part of our team, you'll help us maintain a secure, trustworthy, and compliant platform-an essential foundation for everything we build. As an Infrastructure Security Engineer, you'll design and build secure‑by‑default infrastructure that product teams can rely on. This includes designing and implementing processes and technologies for least privilege, isolating different components, managing attack surface, and implementing layers of tenant isolation on our multi‑tenant SaaS offering. You'll also create frameworks and repeatable patterns that enable our research and engineering teams to move quickly and independently-without sacrificing security. Our security program at Harvey is driven by our collective offensive security experience: breaking into systems at other companies (in white‑hat capacities), responding to real security incidents, and learning from other companies' data breaches. We regularly conduct penetration tests and red team exercises. At the same time, we are all software engineers-contributing code daily and approaching security with an engineering‑first mindset. What You'll Do Incorporate secure design principles into our cloud architecture. Develop isolation mechanisms (e.g. sandboxing) in collaboration with our product engineering team Review security‑critical configuration changes and act as Codeowner for security‑critical parts of our cloud configurations (everything is IaC) Audit our existing cloud environment for vulnerabilities Develop policies and procedures for the secure creation and operation of our cloud environments What You Have 5+ years experience in Security Engineering, Software Engineering, or Site Reliability Engineering roles Demonstrated experience writing high‑quality software and building production‑grade infrastructure and raising the quality bar of engineering teams Strong fundamentals in networking, operating systems, and cryptographic protocols In‑depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors Demonstrated ability to find weaknesses (e.g. privilege escalation) in real‑world cloud environments Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud) (No experience with generative AI or legal required) Bonus Familiarity with large‑scale Infrastructure as Code (IaC) deployments Familiarity with Kubernetes Admission Controllers and policy enforcement Exposure to multi‑cloud environments Compensation Range $201,000 - $260,000 USD Please find our CA applicant privacy notice here. #LI-KV1 Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai #J-18808-Ljbffr
    $201k-260k yearly 5d ago
  • GenAI ML Engineer - Secure AI Workflows & LLM Tuning

    Protegrity USA, Inc. 4.0company rating

    Cyber security analyst job in Palo Alto, CA

    A leading data protection firm is seeking a Machine Learning Engineer to develop GenAI architectures and secure AI workflows. Ideal candidates should hold a PhD or MS in Computer Science and possess 2+ years of relevant experience. Key responsibilities include developing and testing machine learning models, conducting experiments, and collaborating within a team. The role offers competitive compensation along with benefits including health, PTO, and 401K options. #J-18808-Ljbffr
    $127k-179k yearly est. 5d ago
  • AI Security Context Engineer - Autonomous Investigations

    Jibe Ventures 4.0company rating

    Cyber security analyst job in San Francisco, CA

    A cutting-edge cybersecurity startup in San Francisco is seeking an AI Security Context Engineer to shape how AI agents think and drive automated investigations. This role bridges cybersecurity expertise with AI application, translating complex security signals into actionable context for effective investigations. Ideal candidates should possess security analyst experience, a computer science degree, and familiarity with security detection technologies. Competitive salary and generous benefits, including equity and unlimited PTO, are provided. #J-18808-Ljbffr
    $127k-179k yearly est. 5d ago
  • Information Security Engineer - Incident & Vulnerability Expert

    Unilin 4.6company rating

    Cyber security analyst job in Palo Alto, CA

    A leading firm in interior design and construction is seeking an experienced Information Security Engineer to enhance cybersecurity operations and support incident management. The ideal candidate has over 5 years in cybersecurity with expertise in network and endpoint security, complemented by strong analytical skills. This role offers a competitive salary, flexible work environment, and career development opportunities. #J-18808-Ljbffr
    $100k-145k yearly est. 1d ago
  • Security Engineer: Protect, Detect, and Respond

    Silvereye It Solutions Private Limited

    Cyber security analyst job in Palo Alto, CA

    A leading IT solutions provider in California is seeking a Cybersecurity Engineer to safeguard enterprise IT infrastructure, applications, and data. This role demands experience in cybersecurity operations and requires expertise in network and endpoint security, firewalls, and incident response. Candidates should be eager to learn and adapt in the fast-evolving cybersecurity landscape, with opportunities for mentorship and professional growth. #J-18808-Ljbffr
    $114k-163k yearly est. 1d ago
  • Security Engineer for Scale - AWS, SIEM & Tooling

    Gamma.App

    Cyber security analyst job in San Francisco, CA

    A tech innovation company in San Francisco is seeking a Security Engineer to enhance platform security as it scales. You will build security tools, review architecture, and collaborate across teams to ensure security is foundational. Ideal candidates should have 5+ years of software engineering experience, concentrating on security and a solid understanding of AWS environments. This position emphasizes teamwork, creativity, and a supportive culture while requiring hands-on engineering experience and strong communication skills. #J-18808-Ljbffr
    $114k-163k yearly est. 1d ago
  • AI Platform Security Engineer

    Gluegroups Inc.

    Cyber security analyst job in San Francisco, CA

    About Anthropic Anthropic's mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world‑class security organization and keeping the safety and trust of our users at the forefront of everything we do. Responsibilities Build security for large‑scale AI clusters, implementing robust cloud security architecture including IAM, network segmentation, and encryption controls Design secure‑by‑design workflows, secure CI/CD pipelines across our services, help build secure cloud infrastructure, with expertise in various cloud environments, Kubernetes security, container orchestration and identity management Ship and operate secure, high‑reliability services using Infrastructure‑as‑Code (IaC) practices and GitOps workflows Apply deep expertise in threat modeling and risk assessment to secure complex cloud environments Mentor engineers and contribute to hiring and growth of the Security team You may be a good fit if you have: 5‑15+ years of software engineering experience implementing and maintaining critical systems at scale Bachelor's degree in Computer Science/Software Engineering or equivalent industry experience Strong software engineering skills in Python or at least one systems language (Go, Rust, C/C++) Experience managing infrastructure at scale with DevOps and cloud automation best practices Track record of driving engineering excellence through high standards, constructive code reviews, and mentorship Proven ability to lead cross‑functional security initiatives and navigate complex organizational dynamics Outstanding communication skills, translating technical concepts effectively across all organizational levels Demonstrated success in bringing clarity and ownership to ambiguous technical problems Strong systems thinking with ability to identify and mitigate risks in complex environments Low ego, high empathy engineer who attracts talent and supports diverse, inclusive teams Experience supporting fast‑paced startup engineering teams Passionate about AI safety and alignment, with keen interest in making AI systems more interpretable and aligned with human values Strong candidates may also: Design and harden CI/CD pipelines against supply chain attacks through isolated environments, signed attestations, dependency verification, and automated policy enforcement Build secure development workflows through hardened remote environments Implement network segmentation and access controls in cloud environments Manage infrastructure through automated configuration and policy enforcement Harden containerized applications and enforce security policies Deadline to apply: None. Applications will be reviewed on a rolling basis. The annual compensation range for this role is below. For sales roles, the range provided is the role's On Target Earnings (OTE) range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Our total compensation package for full‑time employees includes equity and benefits. Annual Salary: $300,000 - $405,000 USD Logistics Education requirements: We require at least a Bachelor's degree in a related field or equivalent experience. Location‑based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you ******************* email addresses. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links-visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest‑impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large‑scale research efforts. And we value impact-advancing our long‑term goals of steerable, trustworthy AI-rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest‑impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT‑3, Circuit‑Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process. #J-18808-Ljbffr
    $114k-163k yearly est. 3d ago
  • Security Engineer

    Recruiting From Scratch

    Cyber security analyst job in San Francisco, CA

    Title of Role: Security Engineer Company Stage of Funding: Hyper-Growth, Highly Profitable Private Company Office Type: On-site, Full-Time Salary: Competitive (based on experience) + Equity Company Description We're representing one of the fastest-growing companies in the world, scaling from $1M to $500M in revenue run rate in just 17 months - with accelerating growth rates month over month. The company develops AI-powered systems trusted by the top 5 global AI labs, enabling faster and more accurate performance prediction in hiring and evaluation. With a lean and profitable team, they're scaling rapidly and looking for engineers eager to take ownership of security in a high-impact environment. Responsibilities Design and implement security controls across infrastructure, applications, and networks. Monitor for vulnerabilities, threats, and suspicious activity. Conduct penetration tests, vulnerability assessments, and incident response. Embed security practices into CI/CD pipelines and developer workflows. Ensure compliance with frameworks (SOC 2, ISO 27001, GDPR). Partner with engineers to make security a first-class part of system design. Research and respond proactively to emerging threats. Ideal Background Strong knowledge of security principles, tools, and best practices. Experience with SIEMs, IDS/IPS, firewalls, and vulnerability scanning. Familiarity with cloud security (AWS, GCP, or Azure). Solid understanding of encryption, authentication, and authorization systems. Track record of securing distributed, high-scale environments. Excellent collaboration and communication skills. Ability to balance security rigor with speed in a hyper-growth environment. Why Join Impact: Own the security function that powers critical infrastructure for the world's leading AI labs. Learning: Gain early exposure to frontier AI systems and emerging risks. Growth: Take on both infrastructure and research-adjacent projects with fast paths to ownership. Compensation and Benefits Salary: Highly competitive (commensurate with experience) Equity: Generous early-stage equity package Work Setup: On-site in San Francisco Other Benefits: Direct ownership of security architecture and practices Chance to shape security culture in a hyper-growth engineering environment Work alongside senior engineers at the intersection of AI and infrastructure This role is perfect for security engineers who want to build practical, scalable defenses in high-growth environments - balancing rigor with speed while safeguarding mission-critical AI infrastructure. Salary Range: $130,000-$500,000 base. https://www.recruitingfromscratch.com/ #J-18808-Ljbffr
    $114k-163k yearly est. 5d ago
  • Security Engineer - AI Infra & MicroVMs

    E2B

    Cyber security analyst job in San Francisco, CA

    A fast-growing AI security startup in San Francisco seeks an experienced security engineer to secure infrastructure for AI agents. Candidates should have over 5 years in production security and expertise in Linux security. The role involves implementing threat detection and ensuring compliance while working in a dynamic environment. This position requires in-person collaboration and offers ownership over key security challenges. #J-18808-Ljbffr
    $114k-163k yearly est. 3d ago

Learn more about cyber security analyst jobs

How much does a cyber security analyst earn in Oakland, CA?

The average cyber security analyst in Oakland, CA earns between $75,000 and $146,000 annually. This compares to the national average cyber security analyst range of $66,000 to $117,000.

Average cyber security analyst salary in Oakland, CA

$105,000
Job type you want
Full Time
Part Time
Internship
Temporary