Security Engineer Jobs in San Jose, CA
Security Engineer jobs in San Jose are concentrated across enterprise tech, semiconductors, and cloud infrastructure, with major demand in North San Jose, Downtown, and the Alviso corridor. Employers actively hiring include TikTok, Zscaler, and ByteDance. Find a role that fits below and apply directly.
Find Security Engineer JobsOverview
Showing 5 of 58+ Security Engineer jobs
Responsibilities
The Data Protection team safeguards user data, business data, confidential company information, intellectual property, and other data requiring protection against unauthorized disclosure and exfiltration. We design, implement, and operate data loss prevention controls and monitoring across enterprise systems, working closely with IT, Insider Security, and other business stakeholders. Our focus is on effective, practical protection: understanding how different types of data are accessed, used, and shared; applying controls appropriate to their sensitivity and risk; and detecting and preventing unauthorized data movement without unnecessarily disrupting legitimate work. We are looking for a Senior Data Security Engineer with deep, hands-on experience in enterprise data loss prevention. You will own the delivery and continuous improvement of DLP controls, from translating risk scenarios into detection requirements to developing, testing, deploying, and tuning policies. You will also improve the reliability of our DLP platforms and monitoring workflows, automate engineering and operational tasks, and collaborate with cross-functional partners across upstream and downstream teams to address data protection risks and improve security outcomes.
DLP Policy and Detection Engineering
- Translate sensitive-data definitions, business workflows, and data-exfiltration scenarios into actionable DLP policies and detection logic.
- Develop, test, deploy, and tune data protection controls across enterprise DLP platforms, including Forcepoint, Netskope, and Sublime Security, covering relevant endpoint, web, cloud application, and email data flows.
- Apply and combine appropriate detection techniques—including regular expressions, exact data matching, document fingerprinting, classification signals, contextual conditions, and LLM-based semantic analysis—to identify protected data and assess data exposure risks, balancing detection accuracy, privacy, latency, and cost.
- Analyze policy results and investigation feedback to reduce false positives, identify missed detections, and improve alert prioritization.
Control Validation and Safe Deployment
- Build repeatable test cases for sensitive-data detection, legitimate business activity, and potential control bypasses.
- Validate controls before deployment and after significant platform or policy changes.
- Use staged rollouts, documented approvals, and rollback plans to introduce changes safely and minimize business disruption.
- Review policy exceptions with stakeholders, ensuring that scope, ownership, justification, and expiration are clearly defined.
Platform Reliability and Monitoring
- Configure, maintain, and troubleshoot DLP platforms and their integrations in partnership with IT and relevant system owners.
- Build monitoring for platform health, applicable agent or connector coverage, policy deployment, telemetry delivery, and alert routing.
- Investigate technical issues that affect inspection, enforcement, or visibility, and coordinate resolution with internal teams and vendors.
- Develop dashboards and reporting to track control coverage, alert quality, platform reliability, and recurring data-risk patterns.
Automation and Investigation Support
- Use scripting and APIs to automate policy validation, event enrichment, reporting, and repetitive operational workflows.
- Integrate DLP signals with enterprise monitoring and case-management workflows, including deduplication, contextual enrichment, and escalation where appropriate.
- Serve as a technical escalation point for complex DLP events, helping Insider Security interpret detections, validate data movement, and understand control limitations.
- Translate investigation findings into improvements to detection logic, preventive controls, and operational procedures.
- Handle sensitive event data within approved access, privacy, retention, and confidentiality requirements.
Technical Ownership and Collaboration
- Independently drive data protection initiatives from requirements and design through deployment and operational handoff.
- Work with IT, data owners, and business teams to understand legitimate workflows and resolve protection gaps.
- Maintain policy documentation, test results, runbooks, and design decisions; contribute to peer reviews and mentor less experienced engineers.
Qualifications
Minimum Qualifications
- 5+ years of technical security experience, including 3+ years of hands-on enterprise DLP experience; Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- Demonstrated ability to independently design, test, deploy, and tune DLP policies, with strong hands-on expertise in Forcepoint DLP or Netskope DLP—not solely platform administration or alert review.
- Experience using content inspection and contextual signals to detect sensitive data across endpoint, email, web, and cloud exfiltration paths, balancing false positives, missed detections, and enforcement impact.
- Proficiency in Python or another scripting language for API-based automation, and experience analyzing security telemetry using SIEM, log analytics, SQL, or equivalent tools.
- Ability to validate controls, manage production changes safely, and troubleshoot DLP platforms and enterprise integrations.
- Experience collaborating with incident response or insider-risk teams and communicating technical findings to technical and non-technical stakeholders.
- Practical experience applying LLMs to data classification or security detection, evaluating false positives and false negatives, and handling sensitive data appropriately.
Preferred Qualifications
- Hands-on experience with both Forcepoint and Netskope, including cross-platform enforcement and deployment with endpoint, email, or cloud application teams.
- Experience developing and tuning Sublime Security MQL rules for outbound email data protection.
- Experience protecting intellectual property, source code, confidential documents, credentials, or regulated personal information using advanced detection methods such as exact data matching, document fingerprinting, OCR, or sensitivity labels.
- Experience building automated rule tests, version-controlled configuration workflows, telemetry enrichment, or case-management integrations.
- Familiarity with insider-risk scenarios and generative AI data exposure, including unusual transfers, personal-account use, external sharing, and employee transitions.
- Experience deploying LLM-based detection with prompt design, representative evaluation datasets, regression testing, and safeguards for privacy, reliability, latency, and cost.
About USDS
TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.
On-site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.
Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy – a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation
USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information
【For Pay Transparency】Compensation Description (Annually) The base salary range for this position in the selected city is $147200 - $374400 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
For Los Angeles County (unincorporated) Candidates:
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:
1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;
2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and
3. Exercising sound judgment.
Responsibilities
The Data Protection team safeguards user data, business data, confidential company information, intellectual property, and other data requiring protection against unauthorized disclosure and exfiltration. We design, implement, and operate data loss prevention controls and monitoring across enterprise systems, working closely with IT, Insider Security, and other business stakeholders. Our focus is on effective, practical protection: understanding how different types of data are accessed, used, and shared; applying controls appropriate to their sensitivity and risk; and detecting and preventing unauthorized data movement without unnecessarily disrupting legitimate work. We are looking for a Senior Data Security Engineer with deep, hands-on experience in enterprise data loss prevention. You will own the delivery and continuous improvement of DLP controls, from translating risk scenarios into detection requirements to developing, testing, deploying, and tuning policies. You will also improve the reliability of our DLP platforms and monitoring workflows, automate engineering and operational tasks, and collaborate with cross-functional partners across upstream and downstream teams to address data protection risks and improve security outcomes.
DLP Policy and Detection Engineering
- Translate sensitive-data definitions, business workflows, and data-exfiltration scenarios into actionable DLP policies and detection logic.
- Develop, test, deploy, and tune data protection controls across enterprise DLP platforms, including Forcepoint, Netskope, and Sublime Security, covering relevant endpoint, web, cloud application, and email data flows.
- Apply and combine appropriate detection techniques—including regular expressions, exact data matching, document fingerprinting, classification signals, contextual conditions, and LLM-based semantic analysis—to identify protected data and assess data exposure risks, balancing detection accuracy, privacy, latency, and cost.
- Analyze policy results and investigation feedback to reduce false positives, identify missed detections, and improve alert prioritization.
Control Validation and Safe Deployment
- Build repeatable test cases for sensitive-data detection, legitimate business activity, and potential control bypasses.
- Validate controls before deployment and after significant platform or policy changes.
- Use staged rollouts, documented approvals, and rollback plans to introduce changes safely and minimize business disruption.
- Review policy exceptions with stakeholders, ensuring that scope, ownership, justification, and expiration are clearly defined.
Platform Reliability and Monitoring
- Configure, maintain, and troubleshoot DLP platforms and their integrations in partnership with IT and relevant system owners.
- Build monitoring for platform health, applicable agent or connector coverage, policy deployment, telemetry delivery, and alert routing.
- Investigate technical issues that affect inspection, enforcement, or visibility, and coordinate resolution with internal teams and vendors.
- Develop dashboards and reporting to track control coverage, alert quality, platform reliability, and recurring data-risk patterns.
Automation and Investigation Support
- Use scripting and APIs to automate policy validation, event enrichment, reporting, and repetitive operational workflows.
- Integrate DLP signals with enterprise monitoring and case-management workflows, including deduplication, contextual enrichment, and escalation where appropriate.
- Serve as a technical escalation point for complex DLP events, helping Insider Security interpret detections, validate data movement, and understand control limitations.
- Translate investigation findings into improvements to detection logic, preventive controls, and operational procedures.
- Handle sensitive event data within approved access, privacy, retention, and confidentiality requirements.
Technical Ownership and Collaboration
- Independently drive data protection initiatives from requirements and design through deployment and operational handoff.
- Work with IT, data owners, and business teams to understand legitimate workflows and resolve protection gaps.
- Maintain policy documentation, test results, runbooks, and design decisions; contribute to peer reviews and mentor less experienced engineers.
Qualifications
Minimum Qualifications
- 5+ years of technical security experience, including 3+ years of hands-on enterprise DLP experience; Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- Demonstrated ability to independently design, test, deploy, and tune DLP policies, with strong hands-on expertise in Forcepoint DLP or Netskope DLP—not solely platform administration or alert review.
- Experience using content inspection and contextual signals to detect sensitive data across endpoint, email, web, and cloud exfiltration paths, balancing false positives, missed detections, and enforcement impact.
- Proficiency in Python or another scripting language for API-based automation, and experience analyzing security telemetry using SIEM, log analytics, SQL, or equivalent tools.
- Ability to validate controls, manage production changes safely, and troubleshoot DLP platforms and enterprise integrations.
- Experience collaborating with incident response or insider-risk teams and communicating technical findings to technical and non-technical stakeholders.
- Practical experience applying LLMs to data classification or security detection, evaluating false positives and false negatives, and handling sensitive data appropriately.
Preferred Qualifications
- Hands-on experience with both Forcepoint and Netskope, including cross-platform enforcement and deployment with endpoint, email, or cloud application teams.
- Experience developing and tuning Sublime Security MQL rules for outbound email data protection.
- Experience protecting intellectual property, source code, confidential documents, credentials, or regulated personal information using advanced detection methods such as exact data matching, document fingerprinting, OCR, or sensitivity labels.
- Experience building automated rule tests, version-controlled configuration workflows, telemetry enrichment, or case-management integrations.
- Familiarity with insider-risk scenarios and generative AI data exposure, including unusual transfers, personal-account use, external sharing, and employee transitions.
- Experience deploying LLM-based detection with prompt design, representative evaluation datasets, regression testing, and safeguards for privacy, reliability, latency, and cost.
About USDS
TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.
On-site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.
Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy – a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation
USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information
【For Pay Transparency】Compensation Description (Annually) The base salary range for this position in the selected city is $147200 - $374400 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
For Los Angeles County (unincorporated) Candidates:
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:
1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;
2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and
3. Exercising sound judgment.
See All 58 Security Engineer Jobs in San Jose
Find roles in San Jose that match your experience and apply in just a few clicks.
Find Security Engineer JobsSecurity Engineer Job Market in San Jose
Who's Hiring
- TikTok10
- Zscaler4
- ByteDance4
- Muon Space4
- Adobe3
Top Industries Hiring
- Technology & Software
- Electronics & Hardware
- Staffing & Recruiting
- Consulting & Professional Services
Security Engineer Jobs in San Jose: Frequently Asked Questions
How do I get a security engineer job in San Jose?
Focus your search on San Jose's dominant sectors: enterprise software, semiconductor design, and cloud infrastructure companies clustered in North San Jose and the Downtown core. Candidates who stand out here typically hold certifications like CISSP or CEH and can demonstrate hands-on experience with cloud security platforms or network defense tools. Targeting mid-size tech firms in the Alviso and North First Street corridors alongside larger employers improves your odds significantly.
Which companies hire security engineers in San Jose?
Companies currently hiring security engineers in San Jose include TikTok, Zscaler, and ByteDance, per current listings on Migrate Mate as of November 2026. San Jose's employer mix skews toward enterprise software vendors, semiconductor firms, and large cloud infrastructure providers, giving security engineers a wide range of industry environments to choose from.
Are there remote security engineer jobs in San Jose?
Yes, though it depends on the specialization: analytical and cloud-focused roles tend to be more remote-friendly, while positions requiring physical access to data centers or hardware labs are typically on-site. About 65% of security engineer openings tied to San Jose are remote or hybrid as of November 2026, reflecting the strong cloud and software presence in the area. Threat analysis and application security roles account for most of the remote options.
How can I get a security engineer job in San Jose with little or no experience?
The most realistic entry path in San Jose is through a junior security analyst or IT support role at one of the many mid-size software or cloud companies headquartered near North San Jose and the Downtown tech corridor. Local community colleges and workforce programs often partner with area employers for security-focused certifications that carry weight with San Jose hiring teams. Building lab experience with tools common in San Jose's cloud-heavy environment, such as SIEM platforms and container security, strengthens your application considerably.
Which industries hire the most security engineers in San Jose?
The sectors hiring the most security engineers in San Jose are Technology & Software, Electronics & Hardware, and Staffing & Recruiting, based on current listings on Migrate Mate as of November 2026. San Jose's position as a global hub for enterprise technology and semiconductor manufacturing means these industries generate consistent, year-round demand for security talent at multiple experience levels.
Related Jobs in California
See All 58 Security Engineer Jobs in San Jose
Find roles in San Jose that match your experience and apply in just a few clicks.
Find Security Engineer Jobs