ccsp jobs in San Diego

Lead cybersecurity strategy and transformation initiatives for enterprise clients as a Manager at Deloitte's Cyber team. Manage project workstreams, coach teams, and develop executive-level analyses and recommendations that address complex business challenges around cyber programs, governance, risk assessments, and enterprise change.…See more Collaborate across stakeholders to drive alignment, oversee high-quality deliverables, and support business development and practice growth in a consulting environment.

As a Senior Consultant on the Cloud Cyber Risk team, you will deliver Azure cloud security engagements spanning governance, identity, application security, infrastructure, AI security, monitoring, and data protection. You will perform security assessments, solution design, implementations, and health checks across Azure, Microsoft Entra ID, and Microsoft 365 environments, working directly with clients to identify risks and recommend configurations.…See more You will develop technical deliverables including assessment reports, architecture diagrams, and remediation documentation. The role requires 4+ years of technical consulting or cloud security implementation experience, hands-on design and implementation in Azure or hybrid cloud environments, expertise with Azure Policy, Terraform, or JSON-based infrastructure configuration, and 3+ years with cloud security tools (CNAPP, CSPM, CWPP).

This is a senior cloud security consulting role at Deloitte focused on designing, implementing, and managing Azure cloud security solutions across governance, identity, application security, AI security, and infrastructure. The candidate will lead client engagements and cross-functional teams, translating business requirements into enterprise cloud security architectures and strategies, with hands-on experience designing controls for Azure AI services, CNAPP/CSPM/CWPP platforms, and infrastructure-as-code tools like Terraform.…See more Success requires 6+ years of technical consulting and solution architecture in Azure, 4+ years designing cloud security solutions and enterprise architectures, and deep expertise in Azure Policy, Terraform, JSON-based infrastructure, and Microsoft AI security frameworks.

Lead security operations and threat detection engineering for enterprise clients using Google SecOps (Chronicle SIEM and Siemplify SOAR). Design and deploy log ingestion pipelines, develop threat detection rules, translate SOC processes into automated playbooks, and manage integrations across security platforms.…See more Mentor junior SOC engineers and collaborate with threat detection teams to reduce alert fatigue and scale response capabilities.

This role involves conducting comprehensive security assessments of AI systems and deployments, evaluating them against NIST frameworks (AI RMF, CSF, 800-53, 800-171) and other security standards. The consultant will identify AI-specific risks such as prompt injection, model misuse, data leakage, and supply-chain vulnerabilities across cloud platforms (AWS, Azure, hybrid).…See more Responsibilities include developing AI governance frameworks, policies, and controls; assessing AI development environments, model pipelines, APIs, and orchestration layers; and delivering executive-level recommendations and remediation roadmaps. Requires 7+ years of cybersecurity/consulting experience and 3+ years supporting AI/machine learning security initiatives, with strong expertise in AI threat modeling, secure AI deployment, and governance frameworks.

The Senior Security AI Risk Analyst will assess and secure AI-enabled systems at Sony Interactive Entertainment, identifying material security risks, control gaps, and data classification issues. The role requires translating findings into actionable recommendations, partnering with Responsible AI & Governance and security teams, and maintaining a portfolio view of emerging AI security trends.…See more Candidates must have 6+ years securing technical systems with recent hands-on generative AI experience, strong knowledge of modern AI stacks, and the ability to interrogate designs, trace data flows, and identify security weaknesses in LLM and agentic systems. The position demands both deep security fundamentals (identity, permissions, data protection, monitoring) and a practical builder mindset to use tooling, APIs, and automation to explore and improve systems.

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

Principal Cyber Architect supporting DoD systems engineering teams on Assessment and Authorization (A&A) activities, cyber design and implementation, and DevSecOps integration. Responsibilities include conducting vulnerability assessments, analyzing static/dynamic code scans, developing system security plans, and ensuring compliance with RMF controls and DISA STIGs.…See more Requires Bachelor's in Cyber/Systems/Software/Electrical Engineering plus 6+ years of experience and one DoDM 8140 compliant certification (CCSP, CISSP-ISSEP/ISSAP, CSSLP, or Cloud+). Experience with MBSE, Cameo, Zero Trust Architecture, threat modeling, and offensive security analysis preferred.

Design and implement security strategies for Abbott's cloud-based applications and medical devices, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Leverage AI-assisted development tools and cybersecurity platforms to automate vulnerability analysis, evidence collection, and remediation tracking. Conduct hands-on web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools, with demonstrated experience in product security and medical device environments preferred.

Design and develop security strategies for Abbott's cloud-based medical devices and applications, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Conduct web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools. Leverage AI-assisted development and cybersecurity tools—including building agentic AI applications—to automate security deliverables, with responsibility for evaluating AI tools for safe, policy-compliant use and mitigating AI/LLM-specific risks.

Director-level role leading cyber architecture strategy and teams at an enterprise consulting firm. Responsibilities include architecting secure cloud and AI-enabled solutions, guiding security controls and design patterns, mentoring security professionals, and providing technical thought leadership on emerging technologies like generative AI and agentic systems.…See more Requires 10+ years of security architecture experience, expertise across IaaS/PaaS/SaaS platforms, and proven ability to influence enterprise technology strategy while balancing business enablement with risk management.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.