Is Software, IT & Cybersecurity a Good Job Market in San Francisco-Oakland-Fremont, CA?

Executive Verdict

Market rating: competitive | Confidence: High

San Francisco remains a high-pay but hard-to-crack market for software, IT, and cybersecurity, with local posted salary ranges centering on about $168k to $234k and more than 3,400 postings across more than 1,300 companies over the last 90 days.[10][11] But this is not broad-based expansion: California software, IT & cybersecurity employment is essentially flat year-over-year even as postings are up 19.0%, and the metro's Information and Professional and Business Services sectors were down -0.5% and -0.6% year-over-year in March.[12][13][8][9] That combination usually means more openings are selective backfills or priority bets, not easy hiring.

Best positioned: The best odds right now belong to mid-to-senior builders and operators who can show shipped work in Python or TypeScript, cloud and Kubernetes, distributed systems, and secure design.[14][15][16]

Main caution: Do not mistake Bay Area pay bands for broad access: only about 10% of sampled openings are entry-level, only about 15% are remote, and recent layoffs at Google, Amazon, and Meta are adding experienced competitors.[14][17][4][3][1]

What Changed Recently

• California's software, IT & cybersecurity openings rose 19.0% year-over-year by April while employment stayed essentially flat.[13][12]: That points to churn and selective backfilling rather than a clean headcount rebound.
• San Francisco metro Information employment fell -0.5% year-over-year and Professional and Business Services fell -0.6% in March.[8][9]: Many local tech jobs sit inside those sectors, so employers are still managing costs even when they keep hiring for must-have roles.
• Local opportunity is present but skewed: more than 3,400 postings appeared across more than 1,300 companies over the last 90 days, yet only about 10% of sampled roles were entry-level and about 15% were remote.[11][14][17]: You need a tighter target list and stronger proof of readiness than in a broad hiring wave.
• April brought fresh Bay Area layoff signals, including 198 Meta roles locally, while California logged 124 WARN notices covering ~4,765 workers in the month.[1][5]: Expect more competition from laid-off experienced applicants, especially for recognizable-name employers.
• Nationally, unemployment was 4.3% in April, payroll growth was just +0.2% year-over-year, CPI was up +3.1% in March, and average hourly earnings rose +3.6% year-over-year.[18][19][20][21]: Hiring budgets exist, but slower growth and still-elevated inflation make employers pickier and candidates more compensation-sensitive.

What This Means for You

Entry-Level Candidates

Difficulty: High for generic junior software roles.

Best target: Target QA automation, support-to-cloud, and smaller-company full-stack roles where you can show Python or TypeScript plus AWS or Kubernetes in shipped work.[15][6]

Biggest mistake: Applying to brand-name remote software engineer jobs with only coursework or toy projects.

Next step: Build one production-style project with authentication, tests, deployment, and a short runbook, then use it as proof instead of relying on your resume alone.

Mid-Career Candidates

Difficulty: Moderate to high, but materially better than entry level.

Best target: Focus on backend, platform, SRE/DevOps, cloud, and security engineering roles where you can point to uptime, migration, scale, cost, or compliance wins; DevOps was one of the specialist tech roles posting strong gains nationally in April.[27][15]

Biggest mistake: Leading with years of experience instead of system ownership and measurable outcomes.

Next step: Rewrite your resume around 3-5 shipped systems, add an architecture appendix or portfolio page, and actively pursue hybrid and on-site openings rather than waiting for remote-only roles.[17]

Career Switchers

Difficulty: High unless you can anchor the switch in adjacent production experience.

Best target: System admin to cloud/DevOps, backend engineer to security, and help-desk to IAM or support engineering are more plausible moves than a cold jump into general software engineering.

Biggest mistake: Collecting generic certificates without a work sample that proves you can operate in production.

Next step: Pair one focused credential or lab path with a concrete build such as a cloud deployment, CI/CD pipeline, or security hardening project tied to your previous domain.

Salary Reality

high pay highly concentrated

The cleanest local government benchmark is older: software developers in the metro had an annual mean wage of $181,620 in May 2022.[22] More current local posting data shows salary ranges centering on about $168k to $234k, with a broader 25th-75th band of about $139k to $277k.[10] A separate local proxy puts San Francisco software engineers around $165,000–$220,000, and cybersecurity roles in the metro at $168,160.[23][24]

This is still a real San Francisco pay premium. California's mean offered salary on new openings for software, IT & cybersecurity was ~$136,112 in April 2026, which sits below the local posted bands and reinforces that the metro pays up for scarce experience and business-critical ownership.[25]

The upside comes with a narrower funnel: only about 10% of sampled openings are entry-level, only about 15% are remote, statewide employment is essentially flat, and layoffs from major employers are feeding more senior candidates into the market.[14][17][12][1][3][4]

Best-paying path: The strongest pay tends to sit in senior software and platform roles plus security work with cloud or architecture depth; local postings emphasize Python, TypeScript, Kubernetes, AWS, and distributed systems, while cloud security expertise is cited as salary-accretive nationally.[15][26]

Caution: Do not overread the top end. Many high figures are posting ranges or salary-guide estimates rather than government medians, and San Francisco bands are pulled upward by senior roles, which make up about half of sampled openings.[10][14][23][24]

Where the Opportunities Are Concentrated

Real opportunities are concentrated inside core tech employers and tech-adjacent product companies, not spread evenly across the whole metro. In the local sample, about 55% of postings sit in technology, about 20% in information technology, about 10% in software development, and about 5% in healthcare technology.[41] Hiring is fragmented rather than dominated by one employer, and about 30% of postings in the sample come from large employers.[6][42] That fragmentation matters. The most active named employers over the last 90 days include Migrate Mate and MCJ with more than 40 postings each, plus AI Chopping Block, Inc., Roblox Corporation, Nerdleveltech, Rippling, Perot Jain LP, and Zipline.[29] This is a market where a wide, deliberate target list usually beats waiting for a few famous firms to reopen. Role mix also skews upward. About 40% of sampled openings were mid-level and about 50% were senior, so the local market rewards candidates who can already own systems, infrastructure, or security outcomes.[14]

• Senior software and platform engineering (high): This is the core of the market. Local postings most often ask for Python, TypeScript, React, AWS, Kubernetes, and distributed systems, which points to product and platform teams shipping at scale.[15]
• DevOps, SRE, and cloud infrastructure (high): Cloud and operations depth are strong adjacent bets. Kubernetes and AWS each show up in about 15% of local postings, and DevOps was one of the specialist tech roles posting strong gains nationally in April.[15][27]
• Security engineering and cloud security (moderate): Security remains attractive, especially where it overlaps with architecture and cloud. Local cybersecurity pay proxies are strong, and information security analysts are projected to grow 29% nationally through 2034.[24][37][26]
• IT support, sysadmin, and lower-level operations (limited): These roles are part of the category, but the local evidence skews toward higher-paid engineering, platform, and security hiring. That makes the entry ramp narrower and more competitive.

Where to focus: Prioritize mid-to-senior backend, platform, DevOps, cloud, and security roles across the Bay Area's long tail of tech employers; treat fully remote junior software roles as a secondary lane, not the center of your search.

Skills and Credentials Worth Pursuing

• Python (table stakes): Python appears in about 35% of local postings and remains the broadest common language across product, automation, and security-adjacent roles.[15]
• TypeScript and React (differentiator): TypeScript shows up in about 20% of local postings and React in about 15%, which makes modern web-product fluency useful for startup-heavy Bay Area hiring.[15][29]
• AWS and Kubernetes (premium): Kubernetes and AWS each appear in about 15% of local postings, and 2026 tech hiring guidance keeps cloud computing and DevOps at the center of employer investment.[15][30]
• Distributed systems and system design (premium): Distributed systems appears in about 15% of local postings, and 2026 software guidance treats system design as a key differentiator for senior roles.[15][31]
• Secure software design, OWASP, and auth patterns (differentiator): Current guidance says cybersecurity basics such as authentication, authorization, OWASP principles, and secure design patterns are now essential for developers rather than optional add-ons.[16]
• Working effectively with AI tools (differentiator): Working effectively with AI is now treated as a core software-engineering skill, and 91% of organizations are prioritizing AI-skilled hires in 2026.[32][33]
• CISSP (differentiator): CISSP is the most frequently named certification locally, but it appears in less than 5% of sampled postings, so it helps most when paired with real security or architecture work rather than as a standalone signal.[34]
• AI security certifications such as AAISM, CAISE, and CompTIA SecAI+ (premium): AI-focused cybersecurity certifications are emerging as relevant credentials for specialists working on AI risk, governance, and defense in 2026.[35]

Adjacent Roles to Consider

• DevOps / Platform Engineer (both): A strong move for software engineers, sysadmins, and infrastructure-minded IT candidates because the local market already values AWS, Kubernetes, and distributed-systems experience.[15]
• Site Reliability Engineer (bridge): A good bridge for backend or operations candidates who can talk credibly about observability, incident response, and service reliability.
• Security Engineer / Cloud Security Engineer (both): This is a practical pivot for backend, platform, and cloud candidates because secure design and cloud architecture are already close to the core hiring mix.[16][26]
• QA Automation Engineer (bridge): A useful entry bridge for junior developers or manual QA candidates who can script, test APIs, and work inside CI pipelines.

30 / 60 / 90-Day Plan

First 30 Days

• Pick one lane only: backend/platform, DevOps/SRE, cloud security, or QA automation. Rewrite your headline, resume, and portfolio around that lane instead of staying generic.
• Build or clean up one production-style artifact with authentication, tests, deployment, logging, and a short architecture note.
• Create a Bay Area target list from the local long tail of employers, not just mega-cap tech names.
• Prepare outcome stories for scale, reliability, security, migration, or cost reduction; these matter more than a list of tools.

Days 31-60

• Ship a second artifact that complements the first, such as a Kubernetes deployment, a secure-service design, or an incident-response style write-up.
• Apply in waves by segment: first platform/DevOps, then backend, then security-adjacent roles where your background fits.
• Start sending role-specific outreach to hiring managers and recruiters with a direct link to one relevant project or system write-up.
• If you are entry-level or switching careers, get one referral path inside a smaller or midsize employer before spending more time on big-brand remote openings.

Days 61-90

• If interviews are weak, narrow further into one adjacent path like SRE, platform, IAM, or QA automation rather than widening back out.
• Add a credibility layer that matches your lane: an architecture review, a security lab, a cloud cert, or a reliability-focused case study.
• Use compensation data to negotiate selectively, but prioritize role quality, scope, and learning access over chasing the highest posted number.
• If progress remains slow, expand to hybrid and on-site roles across the East Bay, Peninsula, and South Bay rather than treating San Francisco proper as the whole market.

Methodology and Confidence

This April 2026 report was generated on May 10, 2026. Latest direct national data: May 2026. Latest direct San Francisco-Oakland-Fremont, CA data: May 2026.

Confidence: Overall confidence: High. Based on 6 direct local occupation data points and 27 total local evidence items with recent coverage.

Limitations

• Local occupation-specific government wage data for software developers is older than the rest of the report, so current pay conclusions lean more on recent posted-salary ranges and salary guides than on a fresh official metro wage release.[22][10][23]
• This category blends software engineering, IT infrastructure, support, QA, and cybersecurity, so a strong market for DevOps or security does not automatically mean the same conditions for help desk, junior QA, or generalist developer roles.[27][37]
• Statewide software, IT & cybersecurity data was used as a proxy where comparable metro-by-occupation data is not published, so California opening and employment trends may be somewhat stronger or weaker than the exact San Francisco-Oakland-Fremont mix.[12][13]
• The Callings.ai job database is a partial, deduplicated sample of online postings, so its direction-of-demand patterns, leading employer names, and common skills are more reliable than any exact posting total or exact market share.[11][29][15]
• Several March 2026 government year-over-year changes in this report are preliminary and small in magnitude, so slight gains or declines should be read as directionally useful rather than as a final verdict on the market.[38][39][40][36][8][9]

References

1. Sfgate. Meta cuts 198 Bay Area employees as even larger layoffs reportedly loom · 2026-04 · sfgate.com
2. Instagram. Emma Goss on Instagram: "Layoffs announced across 18 San Francisco city departments, and more layoffs are still to come." · 2026-04 · instagram.com
3. Sfbayareatimes. San Francisco Bay Area tech layoffs February 2026: Timeline | SF Bay Area Times · 2026-02 · sfbayareatimes.com
4. Edd. Worker Adjustment and Retraining Notification (WARN) · 2026-01 · edd.ca.gov
5. Reveliolabs. Mass-layoff Notices - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
6. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
7. Cbsnews. Bay Area tech workers feeling the strain amid mounting layoffs across the industry · 2026-04 · cbsnews.com
8. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
9. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
10. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
11. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
12. Reveliolabs. Employment - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
13. Reveliolabs. Job Openings - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
14. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
15. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
16. Medium. Medium: Read and write stories. · 2026-03 · medium.com
17. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
18. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-04 · data.bls.gov
19. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-04 · data.bls.gov
20. Federal Reserve Economic Data. Consumer Price Index for All Urban Consumers: All Items in U.S. City Average · 2026-03 · fred.stlouisfed.org
21. Federal Reserve Economic Data. Average Hourly Earnings of All Employees, Total Private · 2026-04 · fred.stlouisfed.org
22. Bureau of Labor Statistics. Software Developers · 2023-04 · bls.gov
23. Lhh. San Francisco Jobs Outlook and Career Opportunities | LHH · 2026-05 · lhh.com
24. Allcriminaljusticeschools. Cyber Security Salaries by State | All Criminal Justice Schools · 2026-01 · allcriminaljusticeschools.com
25. Reveliolabs. Salaries - Revelio Public Labor Statistics (RPLS) · 2026-04 · reveliolabs.com
26. Kore1. How to Hire Cybersecurity Engineers in 2026 | KORE1 · 2026-05 · kore1.com
27. Zerotomastery. [April 2026] Tech Job Market Trends Monthly | Zero To Mastery · 2026-05 · zerotomastery.io
28. Federal Reserve Economic Data. Federal Funds Effective Rate · 2026-04 · fred.stlouisfed.org
29. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
30. Robert Half. 2026 Technology salary trends: The skills and roles driving growth · 2025-10 · roberthalf.com
31. Javarevisited. 10 Things Every Software Engineer Should Learn in 2026 · 2026-01 · javarevisited.substack.com
32. Smoothstack. 5 Core Software Engineer Skills Needed in 2026 · 2026-01 · smoothstack.com
33. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
34. Qa. qa.com | Top 10 Must Have Cyber Security Certifications in 2026 · 2026-01 · qa.com
35. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
36. Bureau of Labor Statistics. Information Security Analysts · 2026-05 · bls.gov
37. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
38. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
39. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-03 · data.bls.gov
40. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
41. Callings.ai. Callings.ai job-market aggregation · 2026-04 · callings.ai
42. Bluesignal. 2026 Compensation Trends and Salary Guide - Blue Signal Search · 2025-11 · bluesignal.com
43. Onlinedegrees. Cyber Security Salary in California [2025] · 2026-05 · onlinedegrees.sandiego.edu