container-scanning jobs in San Diego

As a Staff DevSecOps Engineer, you will design, build, and automate security controls across Shield AI's AWS infrastructure, containerized workloads, and CI/CD systems. You'll implement hardened container images, integrate vulnerability and compliance scanning into software delivery pipelines, and manage secrets, identity, and access controls at scale.…See more Working with Cybersecurity, Infosec, and Build Engineering teams, you'll translate security requirements into repeatable, maintainable engineering controls that reduce risk without friction. At the Staff level, you'll define reusable security patterns and drive adoption of security engineering practices across multiple teams.

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

Software Developer III will design, develop, test, integrate, and deploy software for the Application Arsenal platform, translating user stories and operational requirements into secure, maintainable solutions. The role requires hands-on coding in languages like Python, Java, C#, Go, or C++; implementing modern architectural patterns (microservices, event-driven, serverless); and managing the complete software delivery lifecycle including CI/CD pipelines, automated security testing (SAST, DAST, SCA), and containerization.…See more The developer will support Kubernetes and cloud deployments, troubleshoot issues across laboratory and operational environments, and collaborate with systems engineers, cybersecurity teams, and government stakeholders. An active Top Secret or TS/SCI clearance with Tier 5 investigation, Security+ certification, and minimum 5 years of Agile software development experience are required.

Senior DevSecOps Engineer supporting full-lifecycle software development across containerized, virtual-machine, and cloud-based architectures within DoD environments spanning Unclassified through Top Secret security domains. Configure and integrate automated security testing tools (SAST, DAST, SCA, container scanning) as CI/CD quality gates within highly regulated Government pipelines.…See more Engineer and troubleshoot interoperable software systems for critical defense platforms operating in DDIL, afloat, and ashore PaaS environments, including Navy ACS and USMC CHE architectures.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).