disa-stigs jobs in San Diego

The Cyber Security Analyst develops and maintains assessment documentation, performs ongoing compliance assessments using tools like ACAS, SCAP, and Trellix, and conducts security audits and Site Based Security Assessments (SBSAs) of NCS Family of Systems. The role requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+ with appropriate CE/OS), and expertise in Risk Management Framework (RMF) v3/v5, System Security Plans (SSPs), POA&Ms, STIG remediation, and eMASS.…See more Responsibilities include patching verification, configuration and change management compliance, incident reporting, continuous monitoring, and potential appointment as Information System Security Officer (ISSO) within 6 months.

This IT Security Engineer Intern role involves assessing software solutions for security vulnerabilities, providing feedback to developers on secure coding practices, and supporting deployment through secure DevSecOps pipelines. The intern will work with mission-focused engineers on DoD defense projects, gathering requirements, developing test plans, and integrating security scanning tools (SAST/DAST) into CI/CD workflows.…See more Required skills include application development in Java or C++ on Linux/Windows, familiarity with networking protocols, and understanding of OWASP Top 10 risks and DISA STIGs. The role emphasizes collaboration with software, systems, and integration engineers to deliver robust, cyber-secure technical solutions.

Senior IT Cyber Security Specialist responsible for enterprise vulnerability scanning, system hardening, and patch management using tools like Nessus and HBSS. Administers security technologies including SIEM platforms, firewalls, endpoint protection, and VPNs while investigating security incidents and performing root cause analysis.…See more Requires 7+ years of progressive IT/cybersecurity experience in DoD or defense contractor environments, with strong Linux administration and Bash scripting skills. Must hold DoD 8570.1-M IAM Level III certification (CISSP, CISM, or GSLC) and maintain compliance with NIST SP 800-171, CMMC Level 2, and DISA STIGs.

CyberSecurity Engineer III will design, deploy, and administer Secret and Top Secret infrastructure across on-premises and private cloud environments, managing VMware virtualization, RHEL/Windows systems, and network infrastructure. The role requires implementing security controls per NIST SP 800-53 and DISA guidelines, automating system builds and patching with Ansible and Jenkins, and remediating vulnerabilities using tools like Nessus and Splunk.…See more You'll collaborate across infrastructure, cybersecurity, and mission teams to maintain secure environments throughout development, accreditation, and operations, with five or more years of infrastructure engineering or systems administration experience required.

DevOps Systems Engineer supporting a U.S. Air Force cloud migration program, responsible for designing and maintaining secure, scalable on-premises and cloud infrastructure.…See more The role focuses on building and managing CI/CD pipelines, automating provisioning and configuration for legacy applications, implementing DevSecOps controls, and administering Linux/Windows servers. Requires 5+ years of system engineering and DevSecOps experience, active Secret clearance (Top Secret preferred), IAT II certification, and hands-on expertise with Kubernetes, Ansible, Jenkins, AWS, and containerization technologies.

DevSecOps Engineer supporting a U.S. Air Force cloud migration program.…See more Responsibilities include designing secure on-premises infrastructure, building and managing CI/CD pipelines, automating provisioning and monitoring, implementing security controls, and troubleshooting infrastructure incidents. Requires active TS/SCI clearance, 5–8+ years of DevSecOps/software engineering experience, IAT II certification, hands-on expertise with Kubernetes, Docker, GitLab, AWS, Linux/Unix, and monitoring tools (ELK Stack, Nagios).

Senior Software Engineer supporting a DoD IT management contract in San Diego. Develop and maintain secure applications using Python and JavaScript, build REST/SOAP/GraphQL APIs, and work within containerized environments (Docker, Kubernetes, OpenShift).…See more Must implement DoD-compliant secure coding practices, DISA STIGs, and DevSecOps/CI/CD pipelines in an Agile/Scrum environment with a required active Secret clearance and IAT Level II certification.

The DevOps Engineer designs, implements, and maintains CI/CD infrastructure and automated deployment pipelines for cloud and hybrid environments, primarily using AWS GovCloud, Jenkins, and Atlassian tools. Responsibilities include AWS EC2 administration, infrastructure automation, build and test pipeline maintenance, DISA STIG compliance, and collaboration with development teams to improve software delivery.…See more The role requires proficiency in scripting languages (Bash, Python, PowerShell), version control (Git), static code analysis tools (Coverity, Fortify), and infrastructure-as-code concepts, with a background in operating systems (RHEL, Windows) and Agile methodologies.

Entarian seeks a DevSecOps Engineer to design and maintain a DevOps Platform supporting the U.S. Navy's software development and systems integration.…See more The role involves developing GitLab CI/CD pipelines, building Infrastructure-as-Code with Terraform on AWS and similar cloud platforms, automating Kubernetes configurations, and implementing security controls per DoD and NIST standards. Responsibilities include hardening base images, validating Information Assurance Controls, documenting processes, and collaborating across Agile teams to deliver secure, cloud-native infrastructure.

Software Engineer I supporting U.S. Navy IT Management Services, developing secure, scalable applications in Python and JavaScript across classified and unclassified environments.…See more Responsibilities include designing REST/SOAP/GraphQL APIs, managing database architectures, implementing DevSecOps CI/CD pipelines with Docker/Kubernetes, and embedding DoD/DISA STIG cybersecurity controls throughout the development lifecycle. Requires active Secret clearance, Bachelor's degree, 4+ years software engineering experience, IAT II certification (CySA+, Security+, CCNA-Security, GSEC, or SSCP), and hands-on expertise in Agile/Scrum, TDD, object-oriented design, and DoD-compliant secure coding practices.

This onsite role administers and secures Windows 11 and Red Hat Enterprise Linux (RHEL) systems supporting NIWC Pacific's mission-critical RDT&E networks and secure enclaves. The administrator will develop PowerShell and Bash automation scripts, implement Ansible playbooks, harden systems to DISA STIGs and DoD cybersecurity standards, manage vulnerability remediation and patching, and support infrastructure design and modernization.…See more The position requires 3+ years each of Windows and RHEL administration experience, strong scripting and troubleshooting skills, and an active Secret clearance with a DoD 8570/8140 IAT Level II certification (Security+, GSEC, SCNP, or SSCP).

A senior DevSecOps engineer will design and operate an automated compliance and AI-driven security platform for DoD and federal healthcare environments. The role demands expertise in DISA STIG automation, container security, RMF/FedRAMP workflows, and SIEM/SOAR integration, with responsibilities spanning secure CI/CD pipeline development, Wazuh and Elastic Stack deployment, OpenRMF automation, and LLM-assisted security operations.…See more The engineer will build hardened base images, maintain compliance pipelines, develop Tines SOAR workflows, and mentor others on architecture decisions.

This role performs continuous security monitoring, compliance assessments, and authorization documentation for Department of Defense information systems. The analyst will use tools like ACAS, SCAP, and eMASS to execute Risk Management Framework processes, conduct security audits, manage Plans of Action and Milestones (POA&Ms), and coordinate STIG remediation with system engineers and administrators.…See more The position requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+), and deep knowledge of RMF, system security plans, and automated compliance scanning. The analyst must be able to work independently, manage competing priorities, and be appointed Information System Security Officer (ISSO) within six months.

Software engineer supporting mission-critical DoD systems in secure, containerized environments. Responsibilities include Linux (Red Hat) system administration, container orchestration (Docker, Kubernetes, OpenShift), AWS infrastructure management, PKI administration, and infrastructure automation using Ansible and scripting.…See more The role requires 8+ years in DoD systems engineering, active TS/SCI clearance, DoD 8570 IAT Level II certification, and willingness to travel for shipboard deployments (~10% annually). May lead small teams and mentor junior engineers.

Software Engineer I will develop and maintain secure, scalable software applications using Python and JavaScript in DoD classified and unclassified environments, implementing DevSecOps practices, CI/CD pipelines, and DISA STIG compliance. The role requires leading secure software development with embedded cybersecurity controls, designing modern web interfaces and APIs (REST, SOAP, GraphQL), and managing database architectures.…See more Candidates must hold an active Secret clearance, a Bachelor's degree with 4+ years of IT/software engineering experience, and IAT II certification (CySA+, Security+, CCNA-Security, GSEC, or SSCP). The position emphasizes Agile/Scrum methodologies, containerization (Docker, Kubernetes), object-oriented design, and cross-functional collaboration within a DoD environment.

Software Engineer I will develop and maintain secure software applications using Python, JavaScript, and other languages across unclassified and classified DoD environments. Responsibilities include implementing secure coding practices aligned with DoD directives and DISA STIGs, building web-based interfaces and Web Service APIs (REST, SOAP, GraphQL), and designing database schemas and system architectures.…See more The role requires proficiency in Agile/Scrum, Test-Driven Development, and CI/CD DevSecOps pipelines, with collaboration on system integration and technical documentation.

Senior Principal System Administrator responsible for managing and maintaining a classified development and integration test environment, including Windows and Red Hat Enterprise Linux servers, VMware virtualization infrastructure, and network hardware. The role requires strong Linux and Windows Server administration expertise, cybersecurity compliance knowledge (DISA STIGs, Nessus, PKI), and experience supporting classified networks.…See more Responsibilities include patching workflows, ePO/McAfee integration, vulnerability scanning, system accreditation support, and maintaining DoD-mandated security posture; some after-hours support for maintenance and incident response required.

Software Engineer II supporting Navy METOC systems, responsible for maintaining and developing fielded software systems, firmware, and engineering development models. Duties include software maintenance, patch deployment automation, security compliance (DISA STIGs, C&A processes), vulnerability management, and system hardening.…See more Requires 3+ years software engineering experience, Navy tactical systems familiarity (preferably CANES), Windows/Linux administration, scripting (PowerShell, Bash, Python), and DoD 8570 IAT Level II or Security+ CE certification.

Software Engineer II supporting Navy METOC fielded systems, lab assets, and EDMs under a DoD in-service engineering program. Responsibilities include maintaining system software and firmware, developing automation scripts for patch deployments, performing software testing and validation, and assisting with security hardening, STIG compliance, and certification & accreditation (C&A) processes.…See more Requires 3+ years of software engineering experience, hands-on Windows/Linux system administration and scripting, familiarity with DISA STIGs and vulnerability scanning tools, and preferably prior Navy Tactical Systems or CANES environment experience.

This is a senior infrastructure and cybersecurity engineering role requiring 10+ years of experience designing, administering, and securing hybrid/cloud infrastructure across Linux, Windows Server, containerized, and private cloud environments. The engineer will implement security controls aligned with NIST SP 800-53, DISA STIGs, RMF, and Zero Trust principles, support DevSecOps pipelines and CI/CD automation, and use scripting, configuration management, and Infrastructure as Code to streamline builds, patching, hardening, and compliance.…See more The role demands collaboration across cybersecurity, software, infrastructure, and mission teams to troubleshoot complex issues, improve security practices, and communicate technical risks and recommendations.

Senior Systems Engineer responsible for designing, implementing, securing, and optimizing enterprise Microsoft 365 and Azure environments for government and commercial clients. You will architect and deploy M365 services (Exchange Online, SharePoint, Teams, Intune, Entra ID) and Azure infrastructure (VMs, networking, storage, AVD, monitoring), lead cloud migrations and hybrid identity configurations, and develop security baselines and Zero Trust policies.…See more The role requires advanced PowerShell scripting, Infrastructure-as-Code practices, troubleshooting complex identity and cloud issues, and mentoring junior engineers while collaborating with security teams and stakeholders.

This role supports cybersecurity engineering and infrastructure security for enterprise, cloud, and classified environments. The engineer will manage vulnerability assessment, system hardening, patching, secure configuration, and DevSecOps pipeline integration across Linux and Windows Server platforms.…See more Responsibilities include compliance support (RMF, ATO, NIST SP 800-53, DISA STIGs), CI/CD security automation, containerized environment hardening, and infrastructure-as-code implementation. Strong technical depth in cloud platforms (AWS/AWS GovCloud), container orchestration, security tooling, and the ability to communicate complex technical and compliance issues to engineering and mission stakeholders are required.

The Cybersecurity Engineer III will support Risk Management Framework (RMF) activities, Assessment & Authorization (A&A) processes, and continuous monitoring for DoD accredited systems. Responsibilities include developing and maintaining security documentation (SSPs, SAPs, SARs, POA&Ms), performing vulnerability assessments, managing eMASS tasking, and conducting security control validation and testing.…See more The role requires 10+ years in cybersecurity, RMF compliance, or incident response; expertise with eMASS, DISA STIGs, and vulnerability assessment tools; and an active Secret clearance with DoD 8570/8140 IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH).

Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.…See more Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.

Information Systems Security Engineer II supporting DoD Ballistic Missile Defense C4I systems with cybersecurity engineering, vulnerability management, and Risk Management Framework activities. Responsibilities include implementing cybersecurity controls, conducting DISA STIG assessments, performing vulnerability scans with tools like ACAS and Nessus, managing patches, maintaining eMASS RMF artifacts, and coordinating remediation across Windows, Linux, Hyper-V, and network environments.…See more Must assess cybersecurity risk, document findings, and support system authorization while maintaining operational readiness in a DoD test, integration, and evaluation environment.