Top 23 Cybersecurity lead Jobs in San Jose, Ca

Principal Cybersecurity Lead
E-Space —Saratoga, CA
- $160,000 - $220,000 a year
- Weekends as needed
- Research
- Office
- Windows
- Paid holidays
- Paid time off
2d
Cybersecurity Lead
A10 Networks —San Jose, CA
- $140,000 - $185,000 a year
- Full-time
- Computer science
- Azure
- Computer Science
AI Tech Risk and Controls Lead
JPMorganChase —Palo Alto, CA
- $147,250 - $200,000 a year
- Full-time
- 5 years
- Office
- Senior level
- Health insurance
- Tuition reimbursement
9d
Lead Cybersecurity Engineer, Regulatory Compliance
Tesla —Fremont, CA
- $120,000 - $252,000 a year
- Full-time
- Computer science
- 7 years
- Computer Science
- Commuter assistance
- Health savings account
9d
Lead Threat Hunter
U.S. Bank National Association —Cupertino, CA
- $126,820 - $149,200 a year
- Full-time
- Azure
- Office
- AWS
- Paid holidays
- Disability insurance
Privacy and Compliance Lead
VIMO INC —Mountain View, CA
- $130,000 - $165,000 a year
- 6 years
- Bachelor's degree
- Agile
Quick Apply
Lead Saviynt Engineer
Lam Research —Fremont, CA
- $137,000 - $287,000 a year
- 7 years
- System design
- Master's degree
Lead, Threat Intelligence Analysis
Google —Sunnyvale, CA
- $204,000 - $284,000 a year
- Full-time
- 5 years
- Office
- Bachelor's degree
- Paid holidays
- Disability insurance
2d
Cybersecurity Business Operations & Sales Support Lead
Accenture —Mountain View, CA
- $122,700 - $271,000 a year
- Full-time
- Hybrid work
- 8 years
- US work authorization
- Military encouraged
- Paid holidays
- Disability insurance
10d
Technology Internal Audit Lead
TikTok —San Jose, CA
- $108,000 - $208,800 a year
- Azure
- 5 years
- DevOps
- Paid parental leave
- Paid holidays
7d
Gateway & Client Engineering Leader - USDS
TikTok USDS JV —San Jose, CA
- $257,400 - $616,000 a year
- Hybrid work
- Computer science
- Computer Science
- 5 years
- Paid parental leave
- Paid holidays
Distributed Systems Cluster Security Software – Engineering Lead
Cerebras Systems —Sunnyvale, CA
- $140,000 - $240,000 a year
- Full-time
- Data analysis skills
- Office
- Analysis skills
Lead Security Architect - TikTok Account
TikTok —San Jose, CA
- $254,400 - $588,000 a year
- System design
- Office
- Bachelor's degree
- Paid parental leave
- Paid holidays
Lead, IT SOX Risk Advisory
Intuit —Mountain View, CA
- $175,500 - $237,000 a year
- Hybrid work
- Computer science
- CPA
- Computer Science
Information Security Business Partner Lead - Product Ops & Supply Chain
Apple —Sunnyvale, CA
- $175,500 - $311,700 a year
- Computer Science
- 8 years
- Bachelor's degree
- Employee stock purchase plan
- Health insurance
Tech Lead Manager, Data Platform
TikTok USDS JV —San Jose, CA
- $208,800 - $438,000 a year
- On call
- Hybrid work
- Computer science
- Computer Science
- 5 years
- Paid parental leave
- Paid holidays
3d
Lead Enterprise Security Recovery Architect
Accenture —Mountain View, CA
- $122,700 - $338,300 a year
- Full-time
- Azure
- Management
- AWS
- Paid holidays
- Disability insurance
2d
Advanced Cyber Threat Response & Forensics Lead/Manager
Deloitte —San Jose, CA
- $134,500 - $265,100 a year
- Full-time
- Up to 50% travel
- Bachelor of Science
- Travel
Lead Embedded Systems Security Architect
Trimble —Sunnyvale, CA
- $138,700 - $190,700 a year
- Online Application
- System design
- Travel
- Linux
- Paid parental leave
- Employee stock purchase plan
Lead, SOX Program Strategy & Audit Excellence - ITGC/ITAC
Intuit —Mountain View, CA
- $142,000 - $206,000 a year
- 7 years
- CPA
- Computer Science

I want to receive the latest job alert for cybersecurity lead in san jose, ca

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

cybersecurity lead jobs near san jose, ca

Principal Cybersecurity Lead

E-Space -
Saratoga, CA

Apply Now

Job Details

Full-time
$160,000 - $220,000 a year
2 days ago

Benefits

Paid holidays
Paid time off

Qualifications

Endpoint Security
Tooling
Automation software
Windows
Internal investigations
TLS
Endpoint Detection and Response (EDR)
Routing protocols
Network routing
Linux
Cybersecurity investigations
Access control management
Root cause analysis
Identity and access management (IAM) solutions
Identity & access management

Full Job Description

Saratoga, CA / Arlington, TX

E-Space US – Business Support (Finance, Legal, IT, HR, Marketing & Comms, Admin) /

Full-Time /

On-Site

Ready to make connectivity from space universally accessible, secure and actionable? Then you’ve come to the right place!

E-Space is bridging Earth and space to enable hyper-scaled deployments of Internet of Things (IoT) solutions and services. We are building a highly-advanced low Earth orbit (LEO) space system that will fundamentally change the design, economics, manufacturing and service delivery associated with traditional satellite and terrestrial IoT systems.

We’re intentional, we’re unapologetically curious and we’re 100% committed to innovate space-based communications and deliver actionable intelligence that will expand global economies, protect space and our planet and enhance our overall quality of life.

What is this role:

We are seeking a deeply technical, hacker-savvy Principal Cybersecurity Lead to defend the company as an active operator, security engineer, and incident leader. This person will understand how modern attackers discover, enter, persist, move laterally, exfiltrate data, and hide. They will continuously track active threat campaigns, newly exploited vulnerabilities, attacker tools, and changes in the global threat landscape, then convert that intelligence into practical defenses.

This is not a policy-only, advisory-only, or dashboard-only position. The successful candidate will make consequential security decisions, personally investigate suspicious activity, write production-quality detection and response code, interrogate network and endpoint telemetry, validate controls through authorized adversarial testing, and drive incidents to a technically sound conclusion. They must be willing to go deep enough to understand the vulnerability, exploit path, affected systems, attacker behavior, business impact, containment choice, and permanent corrective action.

What you will do:

Threat intelligence and attacker awareness

Continuously monitor active threat campaigns, ransomware groups, state-sponsored actors, criminal ecosystems, exploit trends, malware families, phishing infrastructure, and newly weaponized vulnerabilities relevant to the company.
Translate threat intelligence into detection hypotheses, hunting queries, control changes, exposure reviews, and prioritized defensive action - not passive reporting.
Maintain a current view of attacker tactics, techniques, and procedures using practical frameworks such as MITRE ATT&CK while recognizing where real-world behavior departs from frameworks.
Build trusted relationships with relevant industry, vendor, law-enforcement, and information-sharing communities as appropriate.

Enterprise security architecture and attack-surface ownership

Understand and secure enterprise routing, switching, segmentation, DNS, DHCP, VPN, wireless, firewalls, proxies, email, identity providers, directory services, SaaS, cloud, remote access, endpoints, servers, containers, and CI/CD environments.
Map external and internal attack surfaces, trust boundaries, privileged paths, crown-jewel systems, internet exposure, shadow IT, third-party access, and plausible attack chains.
Drive secure architecture decisions across identity, zero-trust access, network segmentation, secrets, cryptography, logging, endpoint protection, cloud controls, backup resilience, and recovery.
Partner with infrastructure, product, software, IT, legal, privacy, and physical-security teams to reduce systemic risk without creating unusable controls.

Detection engineering, coding and automation

Write, review, test, and maintain code that detects malicious or abnormal behavior across network, endpoint, identity, application, and cloud telemetry.
Develop behavioral analytics, correlation logic, enrichment pipelines, investigation tools, automated containment workflows, and repeatable forensic utilities.
Create high-quality SIEM/EDR/NDR detections and hunting content; measure precision, recall, coverage, false positives, alert latency, and operational value.
Use languages such as Python, Go, Rust, PowerShell, shell, SQL, or equivalent as the problem requires; work comfortably with APIs, event streams, structured logs, packet data, and large security datasets.
Apply software-engineering discipline to security code: version control, peer review, tests, deployment controls, observability, rollback, documentation, and secure secrets handling.

Threat hunting, insider risk and incident response

Proactively hunt for weak signals, anomalous sequences, living-off-the-land activity, identity abuse, covert persistence, unauthorized privilege, lateral movement, unusual data access, and exfiltration.
Investigate potential internal and external threats lawfully and proportionately, using authorized data sources, need-to-know access, privacy safeguards, and documented evidence handling.
Lead triage, scoping, containment, eradication, recovery, forensics, root-cause analysis, and post-incident improvement for serious events.
Preserve evidence and timelines suitable for executive, legal, regulatory, insurance, and law-enforcement needs when applicable.
Design and run incident simulations, purple-team exercises, detection validation, and authorized adversary emulation; ensure findings become durable engineering improvements.

Vulnerability and exposure management

Own risk-based vulnerability management across infrastructure, endpoints, cloud, applications, dependencies, appliances, and third-party services.
Distinguish theoretical severity from real exploitability by considering exposure, privileges, reachable attack paths, available exploits, compensating controls, asset value, and active exploitation.
Drive remediation of critical weaknesses and validate fixes through retesting, telemetry, and control verification.
Establish emergency processes for zero-days and mass-exploitation events, including rapid inventory, containment, patching, workaround validation, and executive updates.

Leadership and security operations

Act as the company's senior technical decision-maker during serious cyber events. Decide when to isolate systems, disable accounts, block traffic, interrupt business processes, invoke outside support, or accept short-term operational risk - and document the evidence and reasoning behind those decisions.
Set the technical direction, operating model, priorities, metrics, and quality bar for detection, response, threat hunting, vulnerability management, and security engineering.
Recruit, mentor, and raise the capability of security engineers and analysts while remaining personally capable of deep technical investigation and coding.
Communicate risk in concrete business terms: what can happen, how likely it is, what evidence exists, what must be done, who owns it, and by when.
Build trusted escalation paths and an on-call model that supports decisive action without normalizing burnout or uncontrolled surveillance.

Decision ownership and technical depth

Own security decisions from incomplete initial signal through validated conclusion; state what is known, what is unknown, the confidence level, the immediate risk, and the next decision point.
Dive personally into the highest-risk vulnerabilities and incidents. Read logs, inspect packets, trace identities and privileges, review configurations and code, reproduce issues safely, challenge assumptions, and verify that remediation actually closes the attack path.
Prioritize vulnerabilities by real business exposure and attacker opportunity rather than CVSS score alone; connect individual weaknesses into plausible multi-step attack chains.
Refuse both analysis paralysis and reckless action. Make reversible decisions quickly when possible, escalate irreversible decisions appropriately, and update direction as evidence changes.
Maintain clear ownership through closure: containment is not completion. Require root cause, durable remediation, detection coverage, regression testing, and accountable follow-through.

What you will bring to this role:

Substantial hands-on experience defending complex corporate environments and leading high-severity investigations from initial signal through containment and root cause.
Demonstrated hacker mindset and practical knowledge of exploitation, persistence, credential theft, identity attacks, lateral movement, evasion, command-and-control, and exfiltration - applied only in authorized and ethical contexts.
Deep understanding of TCP/IP, DNS, HTTP/TLS, routing, segmentation, firewalls, proxies, VPNs, wireless, endpoint internals, Windows and Linux, identity systems, cloud services, and enterprise logging.
Strong programming ability and evidence of building security detections, analytics, automation, or investigation tooling used in real operations.
Expertise with SIEM, EDR/XDR, NDR, IAM, cloud security telemetry, vulnerability tooling, packet/log analysis, and digital-forensics methods; vendor-specific experience is less important than first-principles understanding.
Ability to reason from incomplete or conflicting evidence, form and test hypotheses, quantify confidence, and recognize when an alert is noise, an isolated event, or part of a larger campaign.
Demonstrated record of making high-impact security decisions under time pressure and personally validating the technical evidence rather than delegating all analysis to vendors or junior staff.
Sound judgment regarding privacy, employee monitoring, legal authorization, evidence preservation, disclosure, and the boundary between defensive validation and unauthorized access.
Clear written and verbal communication with engineers, executives, legal counsel, employees, customers, and external responders during high-pressure events.

Bonus points:

Experience in a technology company with valuable intellectual property, distributed operations, sensitive customer data, or high-availability infrastructure.
Defense-industry cybersecurity experience is a plus, including supporting CMMC readiness and self-assessment, collecting and maintaining defensible control evidence, tracking remediation, and completing authorized self-reporting accurately and on time.
Experience establishing or materially improving a threat-hunting, detection-engineering, incident-response, or security-operations function.
Background in reverse engineering, malware analysis, exploit analysis, cloud incident response, identity forensics, or network protocol analysis.
Experience with threat-informed defense, purple teaming, security data engineering, and detection-as-code.
Relevant research, open-source security contributions, conference work, responsible disclosures, certifications, or competitive security experience - valued as evidence, not substitutes for demonstrated capability.

$160,000 - $220,000 a year

Why E-Space is right for you:

As a member of our team, you will play a crucial role in driving our success. Our team members have a strong sense of dedication and responsibility; this includes a strong commitment to our mission to create an entirely new suite of global capabilities to improve lives, business efficiencies and build a smarter planet. This means that there will be times when extra hours, including nights and weekends, may be needed to meet critical deadlines and mission goals. In return, we offer a dynamic work environment with opportunities for professional growth and development and the chance to make a meaningful impact in a high-growth industry.

We want you to make the most of your journey at E-Space. That’s why we support and invest in the physical, emotional and financial well-being of our team members and their families. Some of what you can expect when working at E-Space:

An opportunity to really make a difference
Sustainability at our core
Fair and honest workplace
Innovative thinking is encouraged
Competitive salaries
Continuous learning and development
Health and wellness care options
Financial solutions for the future
Optional legal services (US only)
Paid holidays
Paid time off

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Apply Now

Refine Your Search

cybersecurity lead jobs in san jose, ca

Principal Cybersecurity Lead

Cybersecurity Lead

AI Tech Risk and Controls Lead

Lead Cybersecurity Engineer, Regulatory Compliance

Lead Threat Hunter

Privacy and Compliance Lead

Lead Saviynt Engineer

Lead, Threat Intelligence Analysis

Cybersecurity Business Operations & Sales Support Lead

Technology Internal Audit Lead

Gateway & Client Engineering Leader - USDS

Distributed Systems Cluster Security Software – Engineering Lead

Lead Security Architect - TikTok Account

Lead, IT SOX Risk Advisory

Information Security Business Partner Lead - Product Ops & Supply Chain

Tech Lead Manager, Data Platform

Lead Enterprise Security Recovery Architect

Advanced Cyber Threat Response & Forensics Lead/Manager

Lead Embedded Systems Security Architect

Lead, SOX Program Strategy & Audit Excellence - ITGC/ITAC

I want to receive the latest job alert for cybersecurity lead in san jose, ca

Explore jobs in more locations

What is this role:

What you will do:

What you will bring to this role:

Bonus points:

Job Seeker Tools

Employer Tools

Browse

Stay Connected