continuous-monitoring jobs in San Diego

Manage cybersecurity and operations of multiple classified systems, including development and maintenance of enterprise-wide RMF security policies, continuous monitoring, and compliance with federal and DoD standards. Lead and mentor security personnel while overseeing System Security Plan creation, security audits, incident investigation, and risk assessments across complex networks and systems at multiple classification levels.…See more Maintain DoD 8570.01-M certification (CISSP, CISM, CCISO, or GSLC) and an active TS/SCI clearance, with 10+ years of professional experience in classified government environments.

The Cyber Security Analyst develops and maintains assessment documentation, performs ongoing compliance assessments using tools like ACAS, SCAP, and Trellix, and conducts security audits and Site Based Security Assessments (SBSAs) of NCS Family of Systems. The role requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+ with appropriate CE/OS), and expertise in Risk Management Framework (RMF) v3/v5, System Security Plans (SSPs), POA&Ms, STIG remediation, and eMASS.…See more Responsibilities include patching verification, configuration and change management compliance, incident reporting, continuous monitoring, and potential appointment as Information System Security Officer (ISSO) within 6 months.

Lead the design and implementation of advanced security capabilities within Microsoft Azure Government, with responsibility for Azure security architecture, Microsoft Sentinel, Defender, Azure Policy, identity, logging, DevSecOps, and Infrastructure as Code. Guide a small engineering team through technical workstreams that strengthen cloud security, modernize cyber operations, improve security telemetry, and advance continuous security assurance aligned with federal requirements.…See more Move fluidly between architecture and hands-on engineering to drive work from concept through operational adoption, including identifying configuration drift, automating response, and creating measurable evidence of security control effectiveness. Modernize security data and logging architectures to optimize telemetry collection and maintain visibility against sophisticated threats.

Level II Systems Engineer role combining architectural oversight, hands-on server administration, and cybersecurity compliance in a secure defense environment. Responsibilities include continuous software sustainment, zero-downtime production deployments, Linux/Windows enterprise server administration (including VMware vSphere and AWS), Agile methodology application, and DISA STIG compliance enforcement.…See more Requires 3+ years systems engineering experience with modern Agile practices and 2+ years recent operational experience administering scalable virtualized enterprise environments.

This role performs technical cybersecurity assessments and continuous monitoring oversight for Navy acquisition programs, evaluating program security posture, identifying technical risks and control weaknesses, analyzing findings to distinguish significant risks, and tracking remediation activities. The engineer will identify recurring cybersecurity trends across programs, assess the technical adequacy of proposed fixes, and communicate findings and recommendations to technical and program stakeholders.…See more The position requires a Bachelor's degree with 3+ years of cybersecurity experience, specialized knowledge of continuous monitoring principles and security controls, and the ability to analyze technical information to develop actionable recommendations.

The IT Cybersecurity Specialist will architect and implement ServiceNow-specific security controls (RBAC, ACLs, Data Policies, Edge Encryption) aligned to DoD Zero Trust Strategy for the Blue UAS Cleared List platform. The role requires developing and maintaining System Security Plans and RMF artifacts, mapping ServiceNow configurations to NIST SP 800-53 and NIST SP 800-171/172 standards, and tracking POA&M to remediate vulnerabilities and maintain Authority to Operate.…See more The specialist will coordinate with Government IT Program Managers and Authorizing Officials, conduct continuous monitoring, provide Security Assessment Reports, and ensure personnel meet DoDM 8140.03 certification requirements. This position requires a bachelor's degree, five years of practical cybersecurity experience, active DoD security clearance, and demonstrated expertise securing ServiceNow instances in FedRAMP High and DoD IL4/IL5 environments.

Principal Security Engineer (ISSM) responsible for overseeing information security program implementation, managing cybersecurity strategy, personnel, and infrastructure across Navy acquisition programs. The role involves assessing cyber posture, identifying and monitoring security vulnerabilities and risks, recognizing recurring trends across multiple programs, and translating findings into actionable remediation recommendations.…See more Requires 7+ years of cybersecurity/ISSM experience, a graduate degree in a related field, and current GSLC, CISSP, CISM, CAP, or CASP certification with active DoD Secret clearance and eligibility for Top Secret.

ManTech seeks an Information System Security Officer to maintain Assessment & Authorization (A&A) documentation per NIST and DoD standards, track compliance deficiencies via Plans of Action and Milestones, implement continuous monitoring strategies, and oversee audit log systems and patch management. The role requires managing security tools, evaluating system configuration changes, and supporting an Information System Security Manager (ISSM) with compliance and incident response procedures.…See more Candidates must hold Security+ certification, have 2+ years of RMF and NIST SP 800-53 experience, and possess an active Top Secret clearance with SCI eligibility.

Lead cybersecurity and compliance activities for classified DoD and Special Access Program Information Systems. Manage Risk Management Framework (RMF) authorization packages, security control assessments, and continuous monitoring.…See more Coordinate with Security Control Assessors, Authorizing Officials, and Program Security Officers to achieve and maintain authorization to operate (ATO). Evaluate vulnerabilities, security deficiencies, and risks while developing mitigation strategies in a fast-paced, regulated environment.

This role combines systems engineering with DevOps and cybersecurity responsibilities. The engineer will develop requirements traceability, support system integration across applications and infrastructure, and provide continuous software sustainment for production systems.…See more Key duties include administering Linux and Windows servers, deploying and maintaining virtualized environments (VMware vSphere, AWS), managing vulnerabilities and DISA STIG compliance, executing zero-downtime deployments, and coordinating incident response. The role requires 3+ years of systems engineering experience in Agile defense environments and 2+ years of recent enterprise server administration.

As an Information System Security Manager, you will oversee cybersecurity and operations of multiple classified systems, managing personnel and developing enterprise-wide RMF-based information security policies, standards, and procedures. You will maintain compliance with federal and DoD security standards, create and maintain System Security Plans, conduct continuous monitoring, perform risk assessments, and investigate security incidents.…See more You will coordinate with ISSEs, ISAs, and other security roles to design, procure, build, and accredit complex networks and systems across multiple classification levels. Required: Bachelor's degree in Information Security/IT or equivalent with 10+ years experience, DoD 8570.01-M IAM level III certification (CISSP, CISM, GSLC, or CCISO), RMF and NIST 800-53 expertise, and an active TS/SCI clearance.

Systems Engineer II responsible for systems engineering activities including architectural oversight, requirements traceability, and system integration in secure defense environments, alongside continuous software sustainment and operational support. The role requires 3+ years of systems engineering and agile software sustainment experience, 2+ years of enterprise server administration for Linux and Windows (including virtualized environments like VMware and AWS), and demonstrated proficiency in DISA STIG compliance and continuous security monitoring.…See more The candidate will manage production deployments with zero or near-zero downtime, implement vulnerability management, and maintain systems in a defense software environment.

Systems Engineer – Level II supporting systems engineering and continuous software sustainment in secure, mission-critical environments. The role encompasses architectural oversight, requirements traceability, system integration, operational support, vulnerability management, and technical-debt remediation across live production Linux and Windows enterprise infrastructure.…See more Requires 3+ years of systems engineering with Agile methodologies and 2+ years of recent enterprise server administration including VMware vSphere and AWS virtualized environments, with mandatory DISA STIG compliance expertise.

Level II Systems Engineer responsible for systems engineering, architecture, requirements traceability, and system integration in secure, DoD environments. Must maintain enterprise server administration expertise across Linux and Windows in virtualized environments (vSphere, AWS) with continuous monitoring and DISA STIG compliance.…See more Role requires meeting DoD 8140.451 System Administrator Intermediate Proficiency standards and eligibility for privileged/admin access. Work occurs within Agile frameworks (Scrum, Kanban, SAFe) supporting operational sustainment.

Lead the design and implementation of advanced security capabilities within Microsoft Azure Government, driving technical workstreams across Azure security architecture, Microsoft Sentinel, Defender, Azure Policy, identity, logging, and Infrastructure as Code. You will architect cloud security solutions, modernize security data and logging architectures, automate configuration-drift detection and response, and guide a small engineering team from concept through operational adoption.…See more The role requires 5+ years of Azure security engineering experience, expertise with Azure Government, Sentinel, Defender, Azure Monitor, Terraform, and cloud identity platforms, plus the ability to move between architecture and hands-on engineering work.

Lead the design and implementation of advanced security capabilities within Microsoft Azure Government, driving technical workstreams across cloud security architecture, Microsoft Sentinel, Defender, Azure Policy, identity, logging, DevSecOps, and Infrastructure as Code. Modernize security data and logging architectures to collect appropriate telemetry, identify configuration drift, validate security controls, automate response, and create measurable evidence of security posture.…See more Guide a small engineering team from concept through operational adoption, balancing architecture-level strategy with hands-on engineering execution. This role requires 5+ years of Azure security experience, hands-on expertise with Sentinel, Defender, and Azure Monitor, and the ability to align solutions with federal security requirements.

Systems Engineer III will support cybersecurity-informed architecture and acquisition activities for complex Navy systems, tracking cybersecurity implementation, cyber risk, RMF considerations, and security controls across engineering, procurement, certification, and sustainment phases. The role requires coordinating technical representation and integration with Navy platform organizations, program offices, and fleet stakeholders to support roadmaps, engineering changes, technical documentation, demonstrations, and capability fielding.…See more The candidate must have 10+ years of systems engineering experience with complex software, hardware, network, or mission systems, plus demonstrated expertise in architecture development, requirements-driven design, test-driven development, and System of Systems engineering activities including requirements analysis, design coordination, integration planning, and verification/validation.

Implement, assess, and authorize security controls for IT management systems under the Risk Management Framework (RMF). Conduct security reconnaissance, identify gaps, develop Plans of Action and Milestones (POA&Ms), and maintain A&A documentation (SSPs, SAPs, SARs).…See more Manage eMASS compliance, STIG assessments, and coordinate accreditation workflows. Requires 10+ years of cybersecurity experience, an active Secret clearance, IAT Level III certification (CISSP preferred), and hands-on A&A and ATO submission experience.

The Cybersecurity Analyst will support security compliance, assessment, monitoring, and remediation for a Federal information system. Responsibilities include implementing and validating security controls, collecting evidence for assessments and audits, maintaining security documentation, reviewing vulnerability scans, monitoring security alerts, and preparing status reports.…See more The role requires a minimum of five years of cybersecurity or information assurance experience, a bachelor's degree, and an active CompTIA Security+ certification or higher. The analyst will coordinate with technical and program personnel to ensure cybersecurity actions are completed on schedule.

Architect and maintain ServiceNow security controls aligned to DoD Zero Trust architecture in FedRAMP High and DoD IL4/IL5 environments. Configure role-based access controls (RBAC), access control lists (ACLs), data policies, and edge encryption; maintain security matrices and enforce information-level segregation.…See more Develop System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts to support ATO attainment and sustainment. Conduct vulnerability assessments, continuous monitoring, manage Plans of Action and Milestones (POA&M), and generate security assessment reports.

Lyntris seeks a Cyber Security Engineer II to provide Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy software solutions. The role involves designing, implementing, and monitoring cybersecurity and information assurance policies for mission-critical systems; developing system IA documentation (categorization forms, security plans, assessment plans, continuous monitoring plans, risk assessments); and guiding the software development team through security scan review, evaluation, and remediation.…See more The engineer will work with system owners and stakeholders to manage cybersecurity requirements and continuously improve cyber posture. Requires 2–3 years of Department of Navy accreditation experience and working knowledge of NIST standards, RMF, and eMASS.

The RMF Engineer will support DoD Assessment & Authorization activities by developing, maintaining, and managing Risk Management Framework documentation and artifacts throughout the system lifecycle. Key responsibilities include system categorization, creating and updating security plans and control evidence, managing RMF packages in eMASS, assessing security controls, and coordinating with engineering and cybersecurity teams on remediation.…See more The role requires 3+ years of hands-on DoD RMF experience, deep knowledge of NIST SP 800-53 and RMF processes, and proficiency with authorization management tools. This hybrid position is mostly remote and demands strong technical documentation and stakeholder communication skills.

This role performs system hardening, vulnerability management, and STIG implementation across Windows and Linux systems in compliance with DoD cybersecurity standards. The Cybersecurity Engineer II will conduct vulnerability assessments using ACAS, analyze and remediate security findings, apply patches and updates, and support compliance and continuous monitoring activities.…See more The position requires a Bachelor's degree in Cybersecurity or related field, one or more IAT Level II certifications (CCNA, CySA+, GICSP, GSEC, Security+, or SSCP), and 5 years of demonstrated hands-on experience in system hardening and vulnerability remediation in DoD environments.