cism jobs in San Diego

The ISSE will own an assigned eMASS package and drive interim authorization processes for a Navy client, ensuring RMF compliance and DoD cybersecurity guidance adherence. Key responsibilities include conducting STIG assessments, coordinating remediation activities, developing and maintaining POA&Ms, and supporting Microsoft 365 DDIL security testing.…See more The role requires a Bachelor's degree in Computer Science or related field, 3–5 years of RMF/cybersecurity accreditation experience, and a current DoD 8140 Level II certification (CISSP, CISM, CASP+, or CGRC). An active SECRET clearance is mandatory.

The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establishing governance frameworks aligned with industry standards like NIST, ISO, and SOC 2. The role requires leading threat detection, incident response, digital forensics, and vulnerability management while protecting client confidentiality and attorney-client privilege through robust technical and procedural controls.…See more The candidate must ensure secure architecture across cloud, on-premise, and hybrid environments and drive compliance with data protection and privacy regulations including GDPR, CCPA, and HIPAA. This is a senior executive position requiring 8+ years of cybersecurity experience and 6+ years in a senior leadership role managing global security programs.

Senior Systems Engineer responsible for planning and implementing security patches across enterprise Linux and Windows server environments in AWS, Azure, and hybrid infrastructure. Design and operate automation platforms (AWS Systems Manager, Ansible, SCCM/Intune) to scale vulnerability management and remediation across cloud and on-premises fleets.…See more Partner with security, infrastructure, network, and compliance teams on patch testing, deployment sequencing, rollback procedures, and audit-ready documentation in a regulated (GxP/SOX/21 CFR Part 11) environment.

A senior technical architect role responsible for designing cloud and security solutions for multi-client MSP environments, conducting technical quality assurance across engineering teams, and establishing configuration standards and documentation. The role requires 5+ years of hands-on infrastructure/cloud/security/identity experience with deep expertise in Azure, Entra ID, and the Microsoft Defender/Security suite, plus demonstrated ownership-level depth across endpoint protection, RMM, network/firewall, and VDI platforms.…See more The architect will mentor junior engineers, sanity-check technical feasibility and scope, and validate Statements of Work before client delivery while owning the technical planning for complex multi-workstream projects.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation such as System Security Plans (SSP) and Security Assessment Reports (SARs).…See more The role requires in-depth knowledge of the Risk Management Framework, eMASS workflow, DISA compliance, and security categorization overlays. A minimum of 10+ years of cybersecurity or incident response experience is required, along with security certifications such as CISSP, CASP, CISM, CAP, or GSLC.

The Cybersecurity Analyst will serve as a technical subject matter expert evaluating the cybersecurity posture of drone systems and components submitted to the Blue UAS Cleared List Program. You will review assessment reports, identify vulnerabilities and residual risks, validate remediation plans, and provide technical recommendations on compliance with NIST frameworks and DoD Risk Management Framework requirements.…See more The role requires expertise in embedded systems security, firmware analysis, wireless communications, encryption, authentication, and supply chain security. You must hold an active DoD 8570/8140 IAM or IAT Level II/III certification (CISSP, CISM, or Security+) and demonstrate proficiency with NIST SP 800-53 and NIST SP 800-161.

Design and implement security strategies for Abbott's cloud-based applications and medical devices, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Leverage AI-assisted development tools and cybersecurity platforms to automate vulnerability analysis, evidence collection, and remediation tracking. Conduct hands-on web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools, with demonstrated experience in product security and medical device environments preferred.

Lead a comprehensive security architecture program for Logos Space's ground-based satellite terminals, with technical ownership of end-to-end security design across mmWave apertures, RF/baseband subsystems, and baseband hardware. Design and implement RF-related datalink security, secure wireless protocols, threat models, and secure provisioning workflows while ensuring compliance with FIPS and other cryptographic standards.…See more Mentor security engineers, oversee manufacturing security and chain-of-custody processes, and collaborate with hardware and RAN teams to integrate security controls. This is a hands-on role with potential to build a team, requiring 7–10 years of embedded security experience, proficiency in C/C++/Rust and Python, and deep knowledge of threat modeling, secure boot, firmware security, and anti-tampering mechanisms.

Design and develop security strategies for Abbott's cloud-based medical devices and applications, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Conduct web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools. Leverage AI-assisted development and cybersecurity tools—including building agentic AI applications—to automate security deliverables, with responsibility for evaluating AI tools for safe, policy-compliant use and mitigating AI/LLM-specific risks.

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.…See more Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

The RMF Engineer will support DoD Assessment & Authorization activities by developing, maintaining, and managing Risk Management Framework documentation and artifacts throughout the system lifecycle. Key responsibilities include system categorization, creating and updating security plans and control evidence, managing RMF packages in eMASS, assessing security controls, and coordinating with engineering and cybersecurity teams on remediation.…See more The role requires 3+ years of hands-on DoD RMF experience, deep knowledge of NIST SP 800-53 and RMF processes, and proficiency with authorization management tools. This hybrid position is mostly remote and demands strong technical documentation and stakeholder communication skills.