application-security jobs in San Diego

Lead a technical engineering team at the intersection of AI, cybersecurity, and cloud platforms. Design and implement secure AI architectures, cloud security solutions, and DevSecOps practices while mentoring engineers and building reusable reference architectures and playbooks.…See more Require 6+ years of hands-on experience in software engineering, AI engineering, cybersecurity, or cloud security, with demonstrated proficiency in at least one major AI platform (Claude, OpenAI, Gemini, Bedrock, or Vertex AI) and cloud application development in Python, TypeScript, JavaScript, Go, or Java.

Senior Consultant leading AI and cloud security architecture design, implementation, and operational handoff for enterprise clients. Responsibilities include client discovery, technical workshops, architecture reviews, and creating reusable reference architectures and security standards.…See more Requires 3+ years of hands-on software/AI/cloud security experience, proficiency in at least one major LLM platform (Claude, OpenAI, Gemini, Bedrock, Vertex AI), and expertise in secure application development, DevSecOps, cloud security architecture, or AI security controls using Python, TypeScript, JavaScript, Go, or Java.

Lead a team of consultants building production AI/ML applications for cybersecurity, with hands-on responsibility for architecture, code review, and integration across SIEM, SOAR, EDR, and other security platforms. Own technical delivery, timelines, and budgets while mentoring engineers and staying engaged in pair programming and troubleshooting.…See more Work with frontier LLM providers to evaluate agentic systems, RAG pipelines, tool-calling agents, and evaluation harnesses for threat detection and incident response automation. Partner with client stakeholders to translate cyber capabilities into engineering requirements and support account growth through proposals, demos, and reusable delivery playbooks.

Build and deploy AI/ML solutions for cybersecurity as a senior consulting engineer at EY. You will design frontier AI models, LLMs, and agentic architectures tailored to client security workflows, integrating them with SIEM, SOAR, EDR, and other security platforms.…See more You'll translate client use cases into engineering tasks, develop evaluation harnesses, build secure AI deployment pipelines, and deliver production-ready solutions with clear documentation and testing. The role requires 3–5 years of hands-on software engineering experience, proficiency in Python and cloud platforms (AWS/Azure/GCP), and demonstrated expertise in building or deploying AI/ML systems within security contexts.

As a Senior Consultant on the Cloud Cyber Risk team, you will deliver Azure cloud security engagements spanning governance, identity, application security, infrastructure, AI security, monitoring, and data protection. You will perform security assessments, solution design, implementations, and health checks across Azure, Microsoft Entra ID, and Microsoft 365 environments, working directly with clients to identify risks and recommend configurations.…See more You will develop technical deliverables including assessment reports, architecture diagrams, and remediation documentation. The role requires 4+ years of technical consulting or cloud security implementation experience, hands-on design and implementation in Azure or hybrid cloud environments, expertise with Azure Policy, Terraform, or JSON-based infrastructure configuration, and 3+ years with cloud security tools (CNAPP, CSPM, CWPP).

This IT Security Engineer Intern role involves assessing software solutions for security vulnerabilities, providing feedback to developers on secure coding practices, and supporting deployment through secure DevSecOps pipelines. The intern will work with mission-focused engineers on DoD defense projects, gathering requirements, developing test plans, and integrating security scanning tools (SAST/DAST) into CI/CD workflows.…See more Required skills include application development in Java or C++ on Linux/Windows, familiarity with networking protocols, and understanding of OWASP Top 10 risks and DISA STIGs. The role emphasizes collaboration with software, systems, and integration engineers to deliver robust, cyber-secure technical solutions.

Lead a team of security engineers (staff, senior staff, principal levels) owning product security across Intuit's ecosystem, including security reviews, design consults, and risk evaluations. Transform security processes from manual to automation/agent-first, defining baseline controls and security standards for cloud platforms (AWS, GCP, Azure) while raising the bar for AI/agentic systems.…See more Partner with business and engineering leaders to surface risks early, inform decisions, and drive adoption of security controls across large organizations. Requires 8+ years in security engineering, 3+ years managing managers, deep technical expertise in application security and threat modeling, and demonstrated experience rebuilding security programs with hands-on automation.

Staff-level hands-on security engineer responsible for designing and implementing platform security across Crucible, cloud infrastructure, and edge deployments. You will write code, harden Kubernetes and Linux systems, build identity and access controls, secure the software supply chain, and automate security into CI/CD workflows.…See more The role requires 8+ years of security engineering experience, strong software engineering skills, deep cloud and container security expertise, and the ability to support accreditation processes like ATO.

Computer Programmer III will design, develop, and deploy software in highly regulated DoD DevSecOps environments using modern Agile practices (Scrum, Kanban, SAFe) and contemporary architecture patterns (microservices, event-driven, serverless). The role requires hands-on coding in Python, Java, C, Go, or C++; proficiency with containerized deployment on Kubernetes and cloud platforms (AWS, Azure, GCP); and demonstrated expertise implementing security gates, vulnerability scanning, and compliance automation for denied/disrupted operational environments.…See more Candidates must have 5+ years software development experience, 2+ years applying DevSecOps in government/DoD settings, and proven ability to build resilient, offline-first architectures for bandwidth-constrained naval systems.

Design, build, and maintain backend services and APIs in C# / .NET (ASP.NET Core, Web API, Entity Framework) for production airport workloads, with a focus on ERP and billing systems requiring high accuracy and auditability. Modernize legacy .NET Framework applications to modern .NET and Azure, optimize SQL Server and Azure SQL data access, and build cloud-native solutions using App Services, Azure Storage, Key Vault, and managed identities.…See more Write secure, well-tested code instrumented with Application Insights; troubleshoot production issues across application, database, and hosting layers; and partner with product and DevOps to deliver supportable software.

Develop, secure, and maintain software applications for the U.S. Navy across classified and unclassified environments.…See more Design and build web applications and REST/SOAP/GraphQL APIs, implement secure coding practices per DoD directives and DISA STIGs, and support CI/CD DevSecOps pipelines. Requires proficiency in Python and JavaScript, Agile/Scrum methodologies, test-driven development, and containerized deployment; active Secret clearance and DoD 8570 IAT Level II certification mandatory.

Lead a mobile engineering team building iOS and Android applications for an Automated Insulin Delivery system and diabetes management platform. Manage developers proficient in Kotlin, Swift, Objective-C, and Flutter; drive technical architecture, code quality, and design reviews; collaborate with systems engineering, clinical, and quality teams to deliver regulated medical device software.…See more Requires 5+ years of relevant experience (or 3+ with an advanced degree), strong debugging and problem-solving skills, and ability to coach developers on software principles and best practices.

Software Developer III will design, develop, test, integrate, and deploy software for the Application Arsenal platform, translating user stories and operational requirements into secure, maintainable solutions. The role requires hands-on coding in languages like Python, Java, C#, Go, or C++; implementing modern architectural patterns (microservices, event-driven, serverless); and managing the complete software delivery lifecycle including CI/CD pipelines, automated security testing (SAST, DAST, SCA), and containerization.…See more The developer will support Kubernetes and cloud deployments, troubleshoot issues across laboratory and operational environments, and collaborate with systems engineers, cybersecurity teams, and government stakeholders. An active Top Secret or TS/SCI clearance with Tier 5 investigation, Security+ certification, and minimum 5 years of Agile software development experience are required.

Sr. Software Product Security role focused on monitoring, assessing, and responding to product and application security risks, vulnerabilities, and emerging cybersecurity threats.…See more Responsibilities include conducting security assessments, automating vulnerability testing, partnering with engineering teams to define security requirements, troubleshooting security issues across systems and applications, and providing technical guidance on cybersecurity best practices. Requires 4-15+ years of cybersecurity/product security experience, strong knowledge of vulnerability management and risk assessment, hands-on experience with security testing and application validation, and familiarity with secure software development practices. Security certifications (CISSP, Security+) preferred; experience in regulated industries or healthcare a plus.

DevOps Engineer I/II role focused on designing, building, and maintaining CI/CD pipelines and cloud infrastructure supporting mission-critical software development. Responsibilities include managing Jenkins and GitLab CI pipelines, container orchestration with Docker/Podman, AWS and Azure cloud tooling, Ansible automation, and development of test automation scripts.…See more Requires 2–6 years of DevOps experience, 2+ years hands-on with a strongly typed language (preferably C++), and solid Linux, container, and CI/CD pipeline expertise.

This role combines offensive security expertise with vulnerability management for a financial software company. The engineer will triage and analyze bug bounty and vulnerability disclosure reports, reproduce vulnerabilities, develop technical findings, and communicate security risks to product and engineering teams.…See more The position requires 3+ years of cybersecurity experience with 2+ years in offensive security, hands-on penetration testing and vulnerability scanning skills, experience testing web/mobile/desktop applications or AI systems, and proficiency in Python or similar scripting languages.

Software Engineer II responsible for designing, developing, and maintaining complex mobile applications (iOS/Android) for diabetes management systems. You will work independently to design, develop, test, and debug mobile apps using languages like Swift, Kotlin, Java, Dart, or Flutter; integrate with REST/SOAP APIs; manage mobile database operations; and collaborate with architects, QA, and systems teams in an agile environment.…See more The role requires a bachelor's degree and minimum 2 years of relevant mobile development experience, with expertise in at least one of the specified languages and strong debugging/problem-solving skills.

The Cybersecurity Engineer will coordinate cybersecurity activities including preparation and maintenance of Risk Management Framework (RMF) artifacts, risk and vulnerability assessments across network/system/application domains, and day-to-day cyber operations. The role requires performing compliance testing, implementing security controls and policies, working with tools like eMASS and ACAS, and developing security documentation for DoD/government systems up to TS/SCI classification.…See more The candidate must work independently, identify risks and devise mitigation solutions, and communicate findings to both technical and non-technical stakeholders. A bachelor's degree and DoD 8140 qualification (equivalent to former DoD 8570 IAT II) are required, along with 3+ years in cybersecurity, T&E, or Authorization & Accreditation roles.

Design and develop mobile applications (iOS/Android) for an Automated Insulin Delivery system that helps patients manage diabetes. Work independently to design, develop, test, and debug complex mobile apps using Android Studio or Xcode, with expertise in Flutter, Dart, Java, Kotlin, C/C++, Objective-C, or Swift.…See more Collaborate with architects to implement requirements, integrate REST/SOAP APIs, manage mobile databases, and work closely with quality and systems teams in an agile/scrum environment. Requires a Bachelor's degree and 2+ years of relevant mobile development experience.

The Dynamics365 Administrator will configure, maintain, and optimize the Microsoft Dynamics365 CRM platform, focusing on Sales, Customer Service, and Marketing modules. Key responsibilities include customizing entities, workflows, forms, and dashboards; managing user roles and security; developing integrations using Power Automate and Power Apps; and supporting PowerBI reporting.…See more The role requires 2+ years of hands-on Dynamics365 or Salesforce CRM experience, Microsoft Dynamics365 Associate certification (Expert preferred), and proficiency with Power Platform tools and data integrity best practices.

Software Engineer responsible for scoping and defining requirements, designing and implementing solutions using modern programming languages and technology stacks, and ensuring quality through secure coding practices and testing. The role involves converting customer requirements into refined visions, developing software interfaces across network protocols, integrating components into complex environments, and supporting both lab and on-site customer testing.…See more Requires 3–5+ years of relevant experience, strong understanding of SDLC, object-oriented programming, distributed systems, algorithms, and data structures. Travel up to 10% required.

Director-level role leading cyber architecture strategy and teams at an enterprise consulting firm. Responsibilities include architecting secure cloud and AI-enabled solutions, guiding security controls and design patterns, mentoring security professionals, and providing technical thought leadership on emerging technologies like generative AI and agentic systems.…See more Requires 10+ years of security architecture experience, expertise across IaaS/PaaS/SaaS platforms, and proven ability to influence enterprise technology strategy while balancing business enablement with risk management.

Senior Application Developer responsible for designing, developing, and maintaining web applications for a financial services organization. The role requires 6+ years of IT experience with advanced proficiency in .NET, C#, ASP.NET, MVC, and T-SQL, plus experience building secure web applications and integrating complex third-party systems.…See more Responsibilities include code reviews, technical architecture assessment, unit testing, and support for both internet and intranet platforms, with knowledge of UI/UX design and familiarity with modern development tools and methodologies preferred.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

Lead Software Engineer responsible for planning and prioritizing the development backlog while supervising and mentoring two Software Engineer I positions. The role requires designing software architecture, implementing security best practices, establishing development/test/production environments, and conducting code reviews to ensure quality and maintainability.…See more This position requires 7+ years of progressive web application development experience and 2+ years of leadership/mentoring experience, with proficiency across full-stack development (front-end frameworks, server-side development, relational databases, APIs), Git-based version control, automated testing, and CI/CD pipelines.