cis-benchmarks jobs in San Diego

Design, deploy, and maintain enterprise Windows Server infrastructure with expertise in Active Directory, authentication systems (Kerberos, RADIUS, PKI), and DoD-compliant hardening (STIGs, CIS, Zero Trust). Develop Infrastructure-as-Code automation using PowerShell, Python, and Ansible across Windows and Linux environments, manage SCCM/MECM patch deployment and WSUS, and architect virtualized environments on KVM and EC2.…See more Mentor engineering teams on system integration, security, and cross-domain interoperability, and collaborate with cybersecurity, network, and Linux teams to solve complex enterprise deployment challenges.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).