ids-ips jobs in San Diego

An Associate Cybersecurity Engineer will monitor security alerts from SIEM, EDR, and IDS/IPS tools to detect and triage security incidents, then investigate confirmed events and support containment and recovery efforts. The role includes threat analysis, vulnerability validation, security awareness training administration, and phishing simulation campaign execution.…See more The engineer will document investigations, maintain runbooks and playbooks, and collaborate with Security, IT, and DevOps teams while supporting compliance frameworks (SOC 2, ISO 27001, PCI DSS).

As a Managed Services Engineer II (L1 SOC Analyst) on Deloitte's Cyber Operate team, you will monitor security alerts from SIEM and other security tools, validate and escalate incidents within SLA timeframes, investigate suspected threats, and perform IOC searches. You will respond to security events using documented procedures, distinguish false positives from genuine incidents, coordinate with escalation paths, and maintain runbooks and shift handover documentation.…See more The role requires a Bachelor's degree in IT/Computer Science plus 1+ years of security operations or cybersecurity experience, hands-on familiarity with SIEM platforms, IDS/IPS, EDR, DLP, WAF, firewalls, and threat intelligence, and the ability to work rotating 24/7 shifts from a Deloitte office 50% of the time.

Lead information security engineer responsible for designing and implementing comprehensive security architectures across ICW Group's IT and business technology infrastructure. Will conduct risk assessments, penetration tests, and security compliance reviews; partner with systems engineering and project management teams to ensure secure design throughout the development lifecycle; and lead remediation strategies for identified vulnerabilities.…See more Requires 10+ years of security engineering experience, AWS cloud security expertise (3–5 years preferred), and hands-on proficiency with IDS/IPS, firewalls, SIEM, forensics tools, and endpoint security solutions.

Information Security Engineer III will lead security architecture reviews and threat modeling for data, analytics, AI, and cloud initiatives at an insurance company. The role involves designing and implementing security controls for AWS data platforms and AI/ML workloads, providing oversight of LLM usage and emerging AI threats, and mentoring engineering teams on secure development practices.…See more You will partner with Engineering, Cloud, Data, and Operations teams to embed security into system design, manage compliance with NIST, NYDFS, PCI DSS, and CPRA/CCPA standards, and evaluate third-party vendors and security tools. The position requires 8+ years of security engineering experience, 3-5 years in AWS cloud security, and expertise in threat modeling, risk assessment, and incident management.

Senior Principal Cybersecurity Engineer supporting DoD Navy communication systems, responsible for planning and executing penetration tests, performing network traffic analysis, architecting hardened IT systems in classified environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards. Requires 14+ years of experience (or 12+ with master's degree), with 5–7 years in hands-on cybersecurity engineering and 5+ years designing/implementing hardened systems in classified settings.…See more Must hold an active Top Secret clearance and be able to obtain TS/SCI.

SAIC seeks a Principal Cybersecurity Engineer to perform penetration testing, vulnerability assessments, and security architecture work on classified Navy communication systems. The role requires hands-on expertise in network traffic analysis (Wireshark), hardened IT systems design, DoD/IC security frameworks (NIST RMF, DISA STIG), and offensive security techniques against DoD/IC infrastructure.…See more Candidates must have 9+ years total experience (5–7 years in cybersecurity engineering, 5+ in classified/high-security environments), proven red-team capabilities, and an active Top Secret clearance with ability to obtain TS/SCI.

Cloud Security Engineer III responsible for designing, implementing, and maintaining security controls across the company's infrastructure with a focus on AI/ML platforms. The role involves monitoring AI/ML systems for anomalous behavior, identifying and remediating vulnerabilities in ML pipelines, and collaborating with data scientists to implement secure AI/ML solutions.…See more Requires 8+ years of security engineering experience, 3-5 years of AWS cloud security expertise, AWS Security Certification, and foundational knowledge of ML lifecycle and AI/ML security concepts.

The Cybersecurity Engineer II will design, engineer, and deploy cybersecurity and network defense solutions across complex DoD environments, with hands-on responsibility for SIEM, IDS/IPS, firewalls, and vulnerability management platforms. The role involves configuring Splunk Enterprise, conducting network and security analysis with tools like Wireshark and Tenable, and leveraging automation and APIs to improve security operations.…See more The engineer will support DoD Computer Network Defense requirements, integrate solutions across Windows, Linux, and network infrastructure, and collaborate with government and vendor teams throughout acquisition, testing, and deployment. The position requires 5–7+ years of hands-on cybersecurity and network defense experience, a Bachelor's degree in a related technical field, and an active U.S. national security clearance.

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

This Cybersecurity Engineer II role involves designing, engineering, integrating, testing, and deploying cybersecurity and network defense solutions across complex DoD environments. The position requires planning and executing National Security and Cybersecurity assessments, configuring enterprise tools such as Splunk Enterprise, IDS/IPS, firewalls, and vulnerability management platforms, and conducting network and security analysis using tools like Wireshark and Tenable.…See more The engineer will leverage automation, scripting, APIs, and generative AI to improve cybersecurity operations while supporting the full acquisition, integration, deployment, and sustainment lifecycle for DoD Computer Network Defense requirements.

Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.…See more Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.