incident-response jobs in San Diego

This role designs, implements, and optimizes enterprise security systems including firewalls, VPNs, and segmentation controls while developing automation scripts to streamline deployments and enhance threat detection. The architect will leverage network observability and security telemetry to validate policies, identify vulnerabilities, manage patch compliance, and produce metrics for operational visibility.…See more Responsibilities include mentoring security teams, advising on security best practices aligned with business needs, and collaborating on process improvements and incident response workflows. Required: 5+ years progressive cybersecurity experience (3+ with master's degree); preferred: hands-on NGFW expertise, intermediate certifications (GSEC, CEH, CySA+), and scripting proficiency in Python, PowerShell, Bash, or Java.

Senior Platform Engineer to design, build, and operate a cloud-native compute platform on AWS and Kubernetes. You will own platform security, scalability, and evolution through strategic initiatives and migration efforts, lead incident response and troubleshooting, and provide technical leadership and mentorship.…See more Requires 8+ years in platform/SRE/infrastructure engineering with deep AWS expertise, production Kubernetes experience, hands-on CI/CD (GitHub, GitHub Actions, Argo CD), Infrastructure as Code (Terraform/CDK), Kubernetes networking knowledge, and production observability/monitoring skills.

Epsilon C5I seeks a Cybersecurity Engineering SME with 5+ years of DoD cybersecurity experience to plan, implement, and monitor cyber defense measures for command and control systems. The role requires assessing vulnerabilities, implementing security controls, responding to breaches, and ensuring compliance with cybersecurity policy and Assessment and Authorization requirements.…See more A Bachelor's degree in Cybersecurity, Computer Science, or related field is required, along with DoD IAT Level II certification and an active TS/SCI clearance.

Staff-level technical leader for Intuit's Traffic platform, owning the API Gateway, Service Mesh, and MCP Gateway that handles all North-South and East-West traffic across Intuit's ecosystem. Responsible for architecture direction, design of the MCP Gateway for AI agent authentication and routing, driving AI-agent-enabled traffic operations (troubleshooting, config analysis, onboarding), and leading major migrations with attention to resiliency and blast-radius containment.…See more Must operate fluently in Envoy/Istio internals while contributing to multi-quarter roadmap strategy, mentoring staff engineers, and serving as technical escalation for P1/P2 incidents affecting shared infrastructure.

ManTech seeks a Systems Administrator to maintain critical enterprise infrastructure for national security operations in San Diego, supporting the 0100–0900 morning shift. The role requires administering Windows servers, domain controllers, cloud resources, and VMware environments; configuring and troubleshooting KG-175 (TACLANE) cryptographic network encryptors; performing vulnerability remediation with ACAS/Nessus; and executing rapid incident response and site outage troubleshooting.…See more Candidates must have 4+ years of enterprise Windows infrastructure experience (AD, DHCP, DNS, GPO, WSUS), hands-on TACLANE configuration expertise, and DoD 8570 IAT Level II compliance (Security+ CE or equivalent). The position includes up to 25% travel (CONUS/OCONUS) and requires an active Top Secret clearance with SCI eligibility.

Lead a Business Systems team managing strategic projects across CRM, ERP, HRIS, and reporting platforms. Oversee complex system implementations, data migrations, integrations, and upgrades while ensuring system interoperability, data integrity, and security.…See more Manage cross-functional project teams, vendor partnerships, and stakeholder communication to deliver projects on time and within budget. Requires 5+ years of management experience in systems development and 5+ years of systems administration or analyst experience.

ManTech seeks an Information System Security Officer to maintain Assessment & Authorization (A&A) documentation per NIST and DoD standards, track compliance deficiencies via Plans of Action and Milestones, implement continuous monitoring strategies, and oversee audit log systems and patch management. The role requires managing security tools, evaluating system configuration changes, and supporting an Information System Security Manager (ISSM) with compliance and incident response procedures.…See more Candidates must hold Security+ certification, have 2+ years of RMF and NIST SP 800-53 experience, and possess an active Top Secret clearance with SCI eligibility.

Staff-level technical leader for Intuit's Traffic platform (API Gateway and Service Mesh), responsible for architecture and engineering direction across mission-critical, company-wide infrastructure. Primary focus areas include designing and hardening the MCP Gateway for secure AI-agent access and leading AI-agent-driven traffic operations (automated troubleshooting, config analysis, service onboarding).…See more Requires deep expertise in Envoy/Istio internals, distributed systems design, Go/Java, and authentication/authorization systems; will own major migrations end-to-end, drive incident response on P1 infrastructure issues, and mentor senior engineers.

A Software Integration Engineer at SAIC will design, develop, and deploy a hybrid container/virtualization platform supporting enterprise-scale workloads across on-prem and cloud environments. The role encompasses infrastructure-as-code automation, Kubernetes cluster configuration, DevSecOps practices, and integration of core platform services (identity/SSO, PKI, DNS, logging/SIEM, monitoring, secrets management).…See more Responsibilities include automating verification/validation, establishing CI/CD pipelines and standard operating procedures, supporting GPU-enabled AI/ML workloads, and mentoring junior engineers on cloud-native best practices. The position requires 7–9+ years of experience with cloud platforms (AWS, Azure, GCP), containerization (Kubernetes, Docker), virtualization (VMware, Hyper-V, KVM), infrastructure-as-code tools (Terraform, Ansible, Puppet), and DevSecOps toolchains (ArgoCD, GitLab, Jenkins).

The AI Engineer designs, builds, and operates production-grade AI solutions in Azure Government (GCCH) environments, with a focus on LLM and RAG implementations. Responsibilities include testing and optimizing LLMs and model variants, benchmarking RAG systems, building MCP server integrations to connect AI agents to enterprise data, implementing agentic AI workflows using platforms like N8N and Copilot Studio, and developing modular AI microservices.…See more The role also involves supporting security practices (RBAC, Key Vault, data protection), monitoring and incident response for AI workloads, and helping BI and DevOps teams adopt AI capabilities toward production. A Bachelor's degree in Computer Science or related field and 1–2 years' experience with LLMs, RAG, or AI solution development are required.

As a Staff Site Reliability Engineer at Altium (Renesas), you will ensure reliability, availability, and performance of large-scale SaaS cloud platforms through a combination of software engineering and systems administration. You will pioneer improvements in observability (logging, monitoring, APM), develop reliability frameworks, contribute to incident response and management, and drive automation and Infrastructure as Code initiatives across multiple regions.…See more The role requires 6+ years of SRE/DevOps experience in large-scale environments, 3+ years of software development (ideally .NET), strong knowledge of Kubernetes, AWS, microservices, and HA architecture, plus hands-on expertise with observability tools, CI/CD platforms, and IaC tools.

The AI Engineer designs, builds, and operates production-grade AI solutions in Azure Government environments, focusing on LLM and RAG implementations, agentic AI workflows, and secure enterprise integrations. Responsibilities include testing and optimizing language models, benchmarking RAG systems, building MCP server integrations, implementing multi-step AI agents using platforms like N8N and Copilot Studio, and developing modular AI microservices.…See more The role requires hands-on support for security (RBAC, Key Vault, data protection), monitoring, and incident response in Azure Gov, with a focus on moving proofs of concept toward production deployment.

The Cybersecurity Analyst leads Bumble Bee's day-to-day cybersecurity operations, investigating and responding to security incidents, hunting threats, and tuning detection tooling. The role owns the full incident response lifecycle, manages vulnerability remediation, optimizes SIEM platforms, conducts security risk assessments for platforms and vendors, and maintains compliance through access control reviews and policy development.…See more The analyst builds incident response playbooks, monitors threat intelligence and CVE disclosures, and advises on third-party cyber risk. The position requires 4+ years of cybersecurity experience, proficiency with SIEM platforms, EDR tools, vulnerability management, MITRE ATT&CK framework, and knowledge of NIST, SOC, and ISO standards.

Design and implement secure system architectures for complex defense and aerospace programs, ensuring compliance with DoD and NIST cybersecurity standards (DORI 8500.02, CNSSI 1253, NIST SP 800-53, NIST SP 800-171). Perform vulnerability assessments, risk management, and security evaluations across hardware and software; develop Risk Management documents and Secure Technical Implementation Guides; serve as liaison between cybersecurity, hardware, software, and program management to identify and remediate security issues.…See more Requires hands-on understanding of both system operations and hardware-software interactions, with ability to communicate technical security solutions to engineering and leadership teams.

The Information Security Analyst II will protect both operational technology (OT) and information technology (IT) environments at a pharmaceutical manufacturer. Responsibilities include securing industrial control systems, SCADA platforms, PLC-based automation, manufacturing execution systems, and enterprise endpoints; managing OT asset inventory and vulnerability remediation; implementing security controls and hardening standards; and supporting threat detection, incident response, and security assessments.…See more The role requires 3+ years in information security or system administration with direct OT/ICS/SCADA/manufacturing experience, working knowledge of Purdue Enterprise Reference Architecture and relevant standards (ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0), and hands-on experience with endpoint security, vulnerability management, and Windows/Active Directory administration.

This is a Staff Site Reliability Engineer role focused on ensuring reliability, availability, and performance of Altium's large-scale SaaS cloud platforms. The role combines software engineering and systems administration, requiring 6+ years of SRE/DevOps experience and 3+ years of software development (preferably .NET).…See more Responsibilities include designing observability frameworks, automating operational tasks, managing incidents, implementing infrastructure-as-code, and collaborating with engineering teams on reliability best practices across AWS and Kubernetes environments.

Shield AI seeks an experienced SRE Lead to establish and mature reliability practices across Hivemind's cloud infrastructure and platform services. This hands-on technical role involves defining SLIs/SLOs, building monitoring and alerting systems, leading incident response, and driving root-cause analysis.…See more The SRE Lead will mentor teams, develop operational tooling in Python or Go, and partner with product and cloud engineering teams to embed reliability-first practices into system design and infrastructure provisioning.

As a senior technical authority on a Managed Services team, you will own the full lifecycle of cloud contact center solutions for enterprise customers using Amazon Connect. You'll build and deploy production code through automated CI/CD pipelines and Infrastructure as Code (Terraform or CloudFormation), leveraging modern Connect capabilities like Lex, Contact Lens, and Agent Assist.…See more You'll establish development standards, SLA targets, and quality metrics while leading 24/7 proactive monitoring, complex incident response, and root cause analysis as the senior escalation point for the team.

Technical Lead responsible for managing IT enterprise operations, including computer/network support, incident response, and data spillage asset recovery on classified networks (NIPR/SIPR). Provide peer coaching and mentorship to technicians, troubleshoot hardware/software/networking issues, manage customer tickets to SLA, and support VIP/executive-level users.…See more Lead operational and training activities at the site with hands-on expertise in layer 1 networking, VoIP/VTC, and multi-function device troubleshooting.

Technical Lead responsible for managing IT operations, incident response, and Information Assurance across a 24/7 DoD environment. Provides technical coaching and mentorship to technicians while troubleshooting hardware, software, networking, VoIP, and VTC issues.…See more Manages NIPR/SIPR access, customer tickets per SLRs, and escalations to VIP/executive customers. Requires DoD Secret clearance, Security+ or higher certification, and 4+ years of IT operations experience.

Site Reliability Engineer responsible for monitoring system health, detecting issues before they escalate, and owning incident response and debugging end-to-end. You'll build logging and observability tooling, automate deployment pipelines, manage capacity planning, and drive platform reliability at scale.…See more The role requires 5+ years in SRE/DevOps, hands-on production incident response, and strong communication during live troubleshooting. You'll work with AWS, Terraform, Datadog, Python/Bash scripting, and modern infrastructure-as-code practices.

Software Developer III will design, develop, test, integrate, and deploy software for the Application Arsenal platform, translating user stories and operational requirements into secure, maintainable solutions. The role requires hands-on coding in languages like Python, Java, C#, Go, or C++; implementing modern architectural patterns (microservices, event-driven, serverless); and managing the complete software delivery lifecycle including CI/CD pipelines, automated security testing (SAST, DAST, SCA), and containerization.…See more The developer will support Kubernetes and cloud deployments, troubleshoot issues across laboratory and operational environments, and collaborate with systems engineers, cybersecurity teams, and government stakeholders. An active Top Secret or TS/SCI clearance with Tier 5 investigation, Security+ certification, and minimum 5 years of Agile software development experience are required.

This role combines systems engineering with DevOps and cybersecurity responsibilities. The engineer will develop requirements traceability, support system integration across applications and infrastructure, and provide continuous software sustainment for production systems.…See more Key duties include administering Linux and Windows servers, deploying and maintaining virtualized environments (VMware vSphere, AWS), managing vulnerabilities and DISA STIG compliance, executing zero-downtime deployments, and coordinating incident response. The role requires 3+ years of systems engineering experience in Agile defense environments and 2+ years of recent enterprise server administration.

This role manages continuous software sustainment and operational support for production systems in secure, multi-domain defense environments. You will perform tier 2/3 technical support, proactive vulnerability management, and technical debt remediation while executing zero-downtime deployments using Agile methodologies (Scrum, Kanban, SAFe).…See more You must maintain DISA STIG compliance, implement Risk Management Framework controls, and support Authority to Operate (ATO) activities. The position requires hands-on expertise with Linux and Windows Server administration, shell scripting (Bash/Python/Ansible), virtualization, SIEM/security monitoring, and DoD 8140 cyber workforce certifications.

As an Information System Security Manager, you will oversee cybersecurity and operations of multiple classified systems, managing personnel and developing enterprise-wide RMF-based information security policies, standards, and procedures. You will maintain compliance with federal and DoD security standards, create and maintain System Security Plans, conduct continuous monitoring, perform risk assessments, and investigate security incidents.…See more You will coordinate with ISSEs, ISAs, and other security roles to design, procure, build, and accredit complex networks and systems across multiple classification levels. Required: Bachelor's degree in Information Security/IT or equivalent with 10+ years experience, DoD 8570.01-M IAM level III certification (CISSP, CISM, GSLC, or CCISO), RMF and NIST 800-53 expertise, and an active TS/SCI clearance.