csslp jobs in San Diego

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

Principal Cyber Architect supporting DoD systems engineering teams on Assessment and Authorization (A&A) activities, cyber design and implementation, and DevSecOps integration. Responsibilities include conducting vulnerability assessments, analyzing static/dynamic code scans, developing system security plans, and ensuring compliance with RMF controls and DISA STIGs.…See more Requires Bachelor's in Cyber/Systems/Software/Electrical Engineering plus 6+ years of experience and one DoDM 8140 compliant certification (CCSP, CISSP-ISSEP/ISSAP, CSSLP, or Cloud+). Experience with MBSE, Cameo, Zero Trust Architecture, threat modeling, and offensive security analysis preferred.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.