Compliance Jobs in San Jose, CA
Compliance jobs in San Jose are concentrated in North San Jose, downtown, and the Alviso and West San Jose tech corridors, driven by semiconductor, enterprise software, financial services, and healthcare employers. Companies currently hiring include TikTok, TikTok USDS Joint Venture, and Adobe. See the openings below and apply to the ones that match your experience.
Find Compliance JobsOverview
Showing 5 of 452+ Compliance jobs
Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world's biggest brands.
About the Role
Securiti, now part of Veeam, builds the Data Command Center for data security, privacy, governance, and AI security. We are looking for a Staff Security Engineer to provide hands-on technical leadership across product and application security. You will shape secure architecture, strengthen the SDLC, lead vulnerability response, and help engineering teams ship secure cloud and AI capabilities at scale.
This is a senior individual-contributor role for someone who can move comfortably from threat models and pull requests to exploit validation, cloud security, software supply chain risk, and customer or auditor discussions.
What You'll Do
Product & application security
- Own and evolve the secure SDLC across the Securiti portfolio, including threat modeling, design reviews, secure code review, and security testing.
- Provide security leadership for AI capabilities, including LLM-powered features, agents, copilots, prompt injection, retrieval leakage, permissions, and model supply chain risks.
- Tune and improve SAST, dependency, secrets, container, infrastructure, and SBOM controls so findings are actionable and integrated into engineering workflows.
- Lead product vulnerability response from reproduction and severity assessment through remediation, coordinated disclosure, CVE handling, and customer advisories.
- Perform targeted penetration testing and security research across applications, APIs, agents, connectors, and cloud services; scope and validate third-party testing.
- Strengthen software supply chain security through SBOMs, signed and reproducible builds, dependency governance, and secure release practices.
- Build reusable security libraries, reference implementations, hardening guidance, and developer enablement; help scale security through a Security Champions program.
- Track and communicate meaningful security metrics, including remediation time, critical/high findings, scan coverage, and engineering adoption.
Product compliance & assurance
- Partner with engineering on technical controls and evidence supporting SOC 2 Type II, ISO 27001/27701, ISO/IEC 42001, HIPAA, PCI, and FedRAMP Moderate readiness.
- Translate applicable requirements such as GDPR, CCPA, the EU AI Act, DORA, and NIS2 into practical engineering requirements and release criteria.
- Validate remediation of audit and penetration-test findings and escalate material risks when needed.
- Serve as a technical security partner for customer due diligence, audits, security questionnaires, AI-risk reviews, and executive briefings.
Technical leadership
- Work across Engineering, Product, Platform, SRE, and Veeam Corporate Security to make security risk visible in architecture and roadmap decisions.
- Influence engineering standards and security strategy without relying on direct authority.
- Represent Securiti in technical discussions with customers, auditors, standards bodies, and the security research community.
What You'll Bring
- 8+ years in security, with substantial experience in application or product security for SaaS or cloud-native platforms.
- Strong coding and code-review skills in one or more languages such as Go, Python, Java, or TypeScript, with the ability to validate vulnerabilities and build security tooling.
- Deep knowledge of multi-tenant cloud security across AWS, Azure, or GCP, including IAM, Kubernetes, secrets, tenant isolation, and protection of sensitive customer data.
- Hands-on experience securing LLM-powered applications, including prompt injection, retrieval leakage, agent authorization, and model supply chain risks.
- Demonstrated experience building or materially improving a secure SDLC across multiple engineering teams.
- Experience leading vulnerability response or coordinated disclosure, including severity assessment, CVE processes, remediation, and customer communications.
- Practical knowledge of software supply chain security, including SBOM, signing, SLSA, and SSDF concepts.
- Working experience with security assurance frameworks such as SOC 2, ISO 27001, or FedRAMP.
- Strong communication skills and the ability to explain technical risk clearly to engineers, executives, auditors, and customers.
- A computer science or engineering degree, or equivalent practical experience.
Bonus Skills
- Experience with DSPM, privacy engineering, data governance, CASB, DLP, or other platforms handling highly sensitive customer data.
- Experience supporting FedRAMP Moderate or ISO/IEC 42001 for a SaaS platform.
- Familiarity with OWASP guidance for LLM applications, NIST AI RMF, and privacy-by-design principles.
- Relevant certifications such as CISSP, CSSLP, OSCP/OSWE, CCSP, or GIAC.
- Published security research, CVE credits, conference presentations, or open-source security tooling.
- Experience collaborating across US and Asian time zones.
Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.
Personal data collected during the recruitment process will be processed in accordance with our Recruiting Privacy Notice, which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing.
By submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.
Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world's biggest brands.
About the Role
Securiti, now part of Veeam, builds the Data Command Center for data security, privacy, governance, and AI security. We are looking for a Staff Security Engineer to provide hands-on technical leadership across product and application security. You will shape secure architecture, strengthen the SDLC, lead vulnerability response, and help engineering teams ship secure cloud and AI capabilities at scale.
This is a senior individual-contributor role for someone who can move comfortably from threat models and pull requests to exploit validation, cloud security, software supply chain risk, and customer or auditor discussions.
What You'll Do
Product & application security
- Own and evolve the secure SDLC across the Securiti portfolio, including threat modeling, design reviews, secure code review, and security testing.
- Provide security leadership for AI capabilities, including LLM-powered features, agents, copilots, prompt injection, retrieval leakage, permissions, and model supply chain risks.
- Tune and improve SAST, dependency, secrets, container, infrastructure, and SBOM controls so findings are actionable and integrated into engineering workflows.
- Lead product vulnerability response from reproduction and severity assessment through remediation, coordinated disclosure, CVE handling, and customer advisories.
- Perform targeted penetration testing and security research across applications, APIs, agents, connectors, and cloud services; scope and validate third-party testing.
- Strengthen software supply chain security through SBOMs, signed and reproducible builds, dependency governance, and secure release practices.
- Build reusable security libraries, reference implementations, hardening guidance, and developer enablement; help scale security through a Security Champions program.
- Track and communicate meaningful security metrics, including remediation time, critical/high findings, scan coverage, and engineering adoption.
Product compliance & assurance
- Partner with engineering on technical controls and evidence supporting SOC 2 Type II, ISO 27001/27701, ISO/IEC 42001, HIPAA, PCI, and FedRAMP Moderate readiness.
- Translate applicable requirements such as GDPR, CCPA, the EU AI Act, DORA, and NIS2 into practical engineering requirements and release criteria.
- Validate remediation of audit and penetration-test findings and escalate material risks when needed.
- Serve as a technical security partner for customer due diligence, audits, security questionnaires, AI-risk reviews, and executive briefings.
Technical leadership
- Work across Engineering, Product, Platform, SRE, and Veeam Corporate Security to make security risk visible in architecture and roadmap decisions.
- Influence engineering standards and security strategy without relying on direct authority.
- Represent Securiti in technical discussions with customers, auditors, standards bodies, and the security research community.
What You'll Bring
- 8+ years in security, with substantial experience in application or product security for SaaS or cloud-native platforms.
- Strong coding and code-review skills in one or more languages such as Go, Python, Java, or TypeScript, with the ability to validate vulnerabilities and build security tooling.
- Deep knowledge of multi-tenant cloud security across AWS, Azure, or GCP, including IAM, Kubernetes, secrets, tenant isolation, and protection of sensitive customer data.
- Hands-on experience securing LLM-powered applications, including prompt injection, retrieval leakage, agent authorization, and model supply chain risks.
- Demonstrated experience building or materially improving a secure SDLC across multiple engineering teams.
- Experience leading vulnerability response or coordinated disclosure, including severity assessment, CVE processes, remediation, and customer communications.
- Practical knowledge of software supply chain security, including SBOM, signing, SLSA, and SSDF concepts.
- Working experience with security assurance frameworks such as SOC 2, ISO 27001, or FedRAMP.
- Strong communication skills and the ability to explain technical risk clearly to engineers, executives, auditors, and customers.
- A computer science or engineering degree, or equivalent practical experience.
Bonus Skills
- Experience with DSPM, privacy engineering, data governance, CASB, DLP, or other platforms handling highly sensitive customer data.
- Experience supporting FedRAMP Moderate or ISO/IEC 42001 for a SaaS platform.
- Familiarity with OWASP guidance for LLM applications, NIST AI RMF, and privacy-by-design principles.
- Relevant certifications such as CISSP, CSSLP, OSCP/OSWE, CCSP, or GIAC.
- Published security research, CVE credits, conference presentations, or open-source security tooling.
- Experience collaborating across US and Asian time zones.
Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.
Personal data collected during the recruitment process will be processed in accordance with our Recruiting Privacy Notice, which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing.
By submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.
See All 452+ Compliance Jobs in San Jose
Find roles in San Jose that match your experience and apply in just a few clicks.
Find Compliance JobsCompliance Job Market in San Jose
Who's Hiring
- TikTok95
- TikTok USDS Joint Venture95
- Adobe24
- ŌURA24
- Celestica24
Top Industries Hiring
- Technology & Software
Compliance Jobs in San Jose: Frequently Asked Questions
How do I get a compliance job in San Jose?
Target San Jose's dominant sectors: semiconductor and hardware companies in North San Jose, enterprise software firms near downtown and the Guadalupe corridor, and financial services and fintech employers throughout the city. Roles in regulatory affairs, export controls, and data privacy are especially active here. Candidates with direct experience in technology or financial regulations, a CAMS, CCEP, or CRCM credential, and familiarity with California-specific consumer privacy rules have a clear advantage in the local market.
Which companies hire compliances in San Jose?
San Jose compliance roles are posted by TikTok, TikTok USDS Joint Venture, and Adobe and others right now, based on current listings on Migrate Mate as of November 2026. The city's employer base skews heavily toward large technology hardware and software companies, financial institutions with regional offices downtown, and healthcare systems serving Silicon Valley.
Are there remote compliance jobs in San Jose?
Yes, though it depends on the role. Compliance work that is desk-based and analytical, such as policy review, risk assessment, or monitoring, tends to be remote-friendly, while positions requiring physical audits, lab inspections, or direct employee training usually require on-site presence. About 33% of compliance openings tied to San Jose are remote or hybrid as of November 2026, with the highest remote share in financial compliance and data privacy roles tied to San Jose's tech employers.
How can I get a compliance job in San Jose with little or no experience?
The most realistic entry path in San Jose is through compliance coordinator or analyst roles at mid-size technology or fintech companies, many of which build internal teams and promote from adjacent functions like legal operations, finance, or HR. Semiconductor firms in North San Jose also hire export control and trade compliance assistants who learn on the job. Earning a CCEP or enrolling in a CAMS certification course signals commitment and gives your application traction with local employers that might otherwise screen for experience first.
Which industries hire the most compliances in San Jose?
Most compliance openings in San Jose sit in Technology & Software, per current listings on Migrate Mate as of November 2026. San Jose's concentration of semiconductor manufacturers, enterprise cloud software companies, and Silicon Valley financial services offices creates consistent demand for specialists in export controls, data privacy, SOX compliance, and anti-money laundering programs.
Related Jobs in California
See All 452+ Compliance Jobs in San Jose
Find roles in San Jose that match your experience and apply in just a few clicks.
Find Compliance Jobs