cissp jobs in San Diego

Lead detection operations, incident response, and security operations maturation for a growing security team. Operate SIEM/XDR across endpoint, cloud, identity, network, and SaaS telemetry; conduct complex investigations; tune detections; and drive root-cause analysis and post-incident improvements.…See more Require 6+ years of hands-on security operations, detection engineering, or incident response experience with deep proficiency in SIEM/XDR query languages, EDR platforms, scripting (Python, PowerShell, Bash), and MITRE ATT&CK framework application. Mentor analysts, define playbooks and runbooks, lead threat hunts, and own SecOps metrics and operational-readiness reporting.

The Cybersecurity Engineer II will design, engineer, and deploy cybersecurity and network defense solutions across complex DoD environments, with hands-on responsibility for SIEM, IDS/IPS, firewalls, and vulnerability management platforms. The role involves configuring Splunk Enterprise, conducting network and security analysis with tools like Wireshark and Tenable, and leveraging automation and APIs to improve security operations.…See more The engineer will support DoD Computer Network Defense requirements, integrate solutions across Windows, Linux, and network infrastructure, and collaborate with government and vendor teams throughout acquisition, testing, and deployment. The position requires 5–7+ years of hands-on cybersecurity and network defense experience, a Bachelor's degree in a related technical field, and an active U.S. national security clearance.

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

This Cybersecurity Engineer II role involves designing, engineering, integrating, testing, and deploying cybersecurity and network defense solutions across complex DoD environments. The position requires planning and executing National Security and Cybersecurity assessments, configuring enterprise tools such as Splunk Enterprise, IDS/IPS, firewalls, and vulnerability management platforms, and conducting network and security analysis using tools like Wireshark and Tenable.…See more The engineer will leverage automation, scripting, APIs, and generative AI to improve cybersecurity operations while supporting the full acquisition, integration, deployment, and sustainment lifecycle for DoD Computer Network Defense requirements.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, including maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SARs), and managing eMASS tasking throughout the accreditation cycle.…See more The role requires in-depth knowledge of the Risk Management Framework, DISA circuit connections, and cloud service provider inheritance. This position requires a Secret clearance, IAT Level III certification, and one of several advanced certifications (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), plus 10+ years of cybersecurity or incident response experience.

Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.…See more Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.

As a Network Engineer supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain enterprise-grade networked systems (Juniper, Aruba, Cisco, Cambium) across Navy installations worldwide. You will manage the full system lifecycle from staging and integration through fielding and sustainment, implement secure network architectures aligned with RMF and STIGs, and deploy networks in labs, shore facilities, and field environments.…See more The role requires hands-on expertise in Layer 2/3 technologies, routing protocols, VPNs, wireless deployments, and vulnerability remediation, with 50%+ travel to support CONUS and OCONUS operations.

This role leads the design, development, and integration of ashore and afloat network and cloud-agnostic system architectures for Naval infrastructure, with a focus on Windows Server–based enterprise IT systems and hybrid cloud migration. The architect will conduct system assessments, develop detailed workload migration plans, collaborate with cross-functional teams, and provide guidance during implementation to ensure architectural compliance.…See more The position requires 12+ years of enterprise systems engineering in DoD environments, hands-on experience with Red Hat, Microsoft, AWS, Azure, SAN, HCI, virtualization, and DoD cybersecurity compliance frameworks. A Secret clearance is required, and the candidate must obtain a DoD 8570.11 IAT Level II certification (Security+, CCNA Security, GSEC, or SSCP) within 30 days of start.

Lead a team of network engineers designing and maintaining enterprise SD-WAN and software-defined networking solutions for Naval tactical networks. Provide Tier IV network support, perform network architecture design and system operational analysis, troubleshoot outages, and develop automated configuration management solutions.…See more Collaborate with cybersecurity, engineering, QA, and operations teams to meet enterprise migration, data center, and remote access requirements while supporting global critical security missions.

Director-level role leading cyber architecture strategy and teams at an enterprise consulting firm. Responsibilities include architecting secure cloud and AI-enabled solutions, guiding security controls and design patterns, mentoring security professionals, and providing technical thought leadership on emerging technologies like generative AI and agentic systems.…See more Requires 10+ years of security architecture experience, expertise across IaaS/PaaS/SaaS platforms, and proven ability to influence enterprise technology strategy while balancing business enablement with risk management.

Lead the design, development, and integration of ashore and afloat network and cloud-agnostic system architectures for Naval infrastructure, spanning enterprise IT systems, cloud migrations, and hybrid environments. Collaborate with cross-functional teams to conduct system assessments, develop detailed workload migration plans with risk mitigation strategies, and provide architectural oversight during implementation.…See more Required: 12+ years of DoD enterprise systems engineering experience, proficiency with Red Hat and Microsoft technologies, AWS and Azure cloud architecture, infrastructure-as-code, SAN/HCI/DR architectures, and DoD cybersecurity compliance (RMF, STIGs). Must obtain DoD 8570.11 IAT Level II certification within 30 days of start.

Sigma Defense seeks Network Engineers (I, II, or III) to configure, install, and maintain DoD network equipment across Navy Enterprise architecture, including switching, routing, firewalls, wireless, and VoIP systems. Candidates will design and troubleshoot VLANs, routing protocols, IP addressing, and WAN connectivity while applying network STIGs and integrating external services.…See more The role requires hands-on expertise with Cisco ISE, Palo Alto, next-gen firewalls, and deployment automation tools (Ansible, Python, PowerShell), scaling from 0–2 years (Level I) through 7+ years (Level III), with Security+ or CISSP certification mandatory.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.

The Information Systems Security Manager will develop, implement, and maintain the company's information security policies and compliance programs aligned with NIST SP 800-171, DFARS, ISO 27001, and CMMC requirements. Responsibilities include overseeing Controlled Unclassified Information (CUI) and classified information protection, conducting risk assessments and vulnerability analyses, leading incident response efforts, and serving as primary liaison with government agencies on compliance matters.…See more The role requires 7+ years of information security management experience with at least 3 years in a leadership position, and extensive knowledge of defense industry security standards and classified information handling protocols. The ISSM will collaborate with DevSecOps, IT, and engineering teams to integrate security controls across operations and maintain continuous Authority to Operate (cATO) pipelines.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

This is a tiered network engineering role (I–III) supporting DoD Navy Enterprise Network architecture. Engineers will configure, install, and maintain network equipment including switches, routers, firewalls, wireless controllers, and network access control systems; design and troubleshoot VLANs, routing protocols, IP addressing, and WAN connectivity; and apply DoD security standards (STIGs) in coordination with cybersecurity teams.…See more Requirements scale with experience level (0–2 years for Level I, 3+ for Level II, 7+ for Level III) and include knowledge/expertise in Cisco ISE, Palo Alto, Zscaler, Ansible, Python, and PowerShell, plus Security+ or CISSP certification.

Network Engineer responsible for designing, configuring, and sustaining mission-critical networked systems including Cisco, Aruba, Juniper, Cambium, and Antaira equipment. The role spans end-to-end lifecycle activities: staging, integration, testing, fielding, and sustainment of networks in labs, shore facilities, and data centers.…See more Requires hands-on expertise in Layer 2/3 technologies, routing protocols (OSPF, BGP), VPNs, firewalls, and wireless deployments, with mandatory compliance to RMF and STIGs. Must hold or obtain a DoD Secret clearance and meet DoD 8570/8140 baseline certification (Security+, CISSP, CASP+, or higher) plus vendor certifications (JNCIA/CCNA or higher).

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

Serve as a primary administrator for core security technologies including Microsoft Defender Suite, Entra ID, Conditional Access, and endpoint protection, while also administering enterprise infrastructure across Microsoft 365, Azure, AWS, VMware, and hybrid platforms. Troubleshoot complex infrastructure and security issues, manage cloud backup and disaster recovery, monitor alerts through LogicMonitor and SIEM/MDR/SOCaaS services, and coordinate with security operations teams on investigations and remediation.…See more Requires 8+ years of hands-on experience in cybersecurity and infrastructure engineering in business-critical environments, with deep expertise in Microsoft identity and security technologies, cloud platforms, vulnerability management, and enterprise backup solutions. Participate in after-hours support and escalation activities as needed.

As a Network Engineer supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain advanced networking equipment (Juniper, Aruba, Cisco) across Navy installations worldwide. You will design secure network architectures, implement RMF and STIG compliance, manage VLANs/routing/VPNs, support wireless deployments, and conduct site surveys and integration testing with 50%+ travel.…See more You must hold an active DoD Secret clearance, meet DoD 8570/8140 certification requirements (Security+ minimum), and have 8+ years of DoD or enterprise network engineering experience with hands-on expertise in Juniper, Aruba, and Cisco platforms.

As a Network Engineer supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain advanced networking equipment (Juniper, Aruba, Cisco, Antaira, Cambium) across Navy installations worldwide. You will support the full system lifecycle—staging, integration, testing, fielding, and sustainment—of networked systems protecting mission-critical assets, implementing secure architectures aligned with RMF and STIGs, and conducting site surveys and operational verification testing during frequent travel (50%+).…See more The role requires hands-on expertise in Junos OS, ArubaOS, Cisco platforms, routing protocols (OSPF, BGP), VLANs, VPNs, firewalls, and vulnerability remediation, with a DoD 8570/8140 baseline certification and an active interim Secret clearance.

Enterprise IT Systems Engineer supporting mission-critical Department of Defense environments with 12+ years of experience designing and administering secure, scalable infrastructure. Responsibilities include managing Microsoft Active Directory, PKI, enterprise backup/disaster recovery, storage area networks, Hyper-Converged Infrastructure, and virtualization platforms (VMware, Kubernetes, Docker).…See more Must demonstrate expertise in DoD cybersecurity compliance (RMF, STIGs), cloud services (Office 365, IaaS/PaaS), and secure system technologies including encryption, VDI, and VoIP. Requires TS/SCI clearance and ability to obtain DoD 8570.11 IAT Level II certification within 30 days.

As a Network Engineer IV supporting Naval Information Warfare Center Pacific, you will engineer, configure, and sustain advanced Cisco, Aruba, Juniper, and other enterprise networking equipment for Navy Public Safety Systems. You will support the full system lifecycle—staging, integration, testing, fielding, and sustainment—across NIWC labs, shore facilities, and deployed environments.…See more Responsibilities include implementing secure network architectures aligned with Risk Management Framework (RMF) and Security Technical Implementation Guides (STIGs), performing system hardening and vulnerability remediation, and maintaining configuration baselines and technical documentation. You must hold or obtain a DoD Secret security clearance, possess DoD 8570/8140 baseline certification (Security+ CE minimum), and have 8+ years of hands-on network engineering experience with Juniper, Aruba, and Cisco platforms.

Network Engineer supporting the Global Sustainment Contract at Naval Information Warfare Center Pacific, responsible for engineering, configuring, and sustaining advanced networking equipment (Juniper, Aruba, Cisco, Antaira, Cambium) across Navy installations worldwide. The role encompasses end-to-end system lifecycle support including staging, integration, testing, fielding, and sustainment; deployment and troubleshooting in labs, shore facilities, and data centers; and implementation of secure network architectures aligned with Risk Management Framework (RMF) and Security Technical Implementation Guides (STIGs).…See more Requires 8 years of network engineering experience, active DoD Secret clearance, and DoD 8570/8140 baseline certification (Security+ CE minimum or higher such as CISSP or CASP+), with hands-on expertise in Juniper (Junos OS, EX/QFX/SRX), Aruba (ArubaOS, Instant AP, Aruba Central), Cisco (Catalyst, ISR, ASA, Firepower), and core networking technologies including Layer 2, routing protocols (Static, OSPF, BGP), VPNs (IPSec), ACLs, and firewalls.