api-security jobs in San Diego

This role involves conducting comprehensive security assessments of AI systems and deployments, evaluating them against NIST frameworks (AI RMF, CSF, 800-53, 800-171) and other security standards. The consultant will identify AI-specific risks such as prompt injection, model misuse, data leakage, and supply-chain vulnerabilities across cloud platforms (AWS, Azure, hybrid).…See more Responsibilities include developing AI governance frameworks, policies, and controls; assessing AI development environments, model pipelines, APIs, and orchestration layers; and delivering executive-level recommendations and remediation roadmaps. Requires 7+ years of cybersecurity/consulting experience and 3+ years supporting AI/machine learning security initiatives, with strong expertise in AI threat modeling, secure AI deployment, and governance frameworks.

The Senior Security AI Risk Analyst will assess and secure AI-enabled systems at Sony Interactive Entertainment, identifying material security risks, control gaps, and data classification issues. The role requires translating findings into actionable recommendations, partnering with Responsible AI & Governance and security teams, and maintaining a portfolio view of emerging AI security trends.…See more Candidates must have 6+ years securing technical systems with recent hands-on generative AI experience, strong knowledge of modern AI stacks, and the ability to interrogate designs, trace data flows, and identify security weaknesses in LLM and agentic systems. The position demands both deep security fundamentals (identity, permissions, data protection, monitoring) and a practical builder mindset to use tooling, APIs, and automation to explore and improve systems.

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

Build and maintain a native Go-based Identity SDK with feature parity to existing authentication libraries, including Client Bearer Token validation, cryptographic signature verification, token expiration and revocation handling, and security header injection. Integrate token validation within Go-based service mesh and proxy environments (Envoy, Istio), design migration strategies with progressive rollouts and rollback capabilities, and conduct performance benchmarking and latency optimization.…See more Collaborate cross-functionally to deliver secure, scalable identity solutions and create technical documentation for adoption by engineering teams.

Join an offensive security team to triage and analyze vulnerabilities from bug bounties, penetration tests, and responsible AI security programs. You'll assess severity, write detailed security reports, collaborate with product and security teams on remediation, and support penetration testing across web apps, APIs, mobile, desktop applications, and LLMs.…See more The role requires 3+ years in computer security with at least 2 years of offensive security experience, hands-on penetration testing and vulnerability scanning skills, deep knowledge of OWASP Top 10, and proficiency in Python or similar scripting languages.

This role combines offensive security expertise with vulnerability management for a financial software company. The engineer will triage and analyze bug bounty and vulnerability disclosure reports, reproduce vulnerabilities, develop technical findings, and communicate security risks to product and engineering teams.…See more The position requires 3+ years of cybersecurity experience with 2+ years in offensive security, hands-on penetration testing and vulnerability scanning skills, experience testing web/mobile/desktop applications or AI systems, and proficiency in Python or similar scripting languages.

Lead the design, governance, and technical implementation of an enterprise API and AI gateway platform serving internal and external consumers. Define solution standards, security controls, compliance protocols aligned to financial services regulations, and LLM integration patterns across Apigee X, MCP servers, and multiple AI providers.…See more Manage a team through API modernization and AI gateway buildout while actively contributing hands-on engineering on proxies, policies, and MCP integrations when needed.