incident-response jobs in San Diego

Software Engineer II responsible for operating and improving large-scale data platforms (SQL, NoSQL, streaming, caching) with a focus on reliability, automation, and developer experience. The role involves building self-service infrastructure tooling, contributing to observability and SLO definitions, participating in on-call rotations, and automating infrastructure provisioning using Terraform.…See more Requires 3+ years of software or infrastructure engineering experience, production Go development, hands-on Terraform expertise, and deep knowledge of distributed systems concepts and operational practices.

Halcyon seeks a Senior Information Security Specialist to strengthen enterprise security posture through third-party risk assessment, compliance coordination, policy development, and incident response preparedness. The role involves managing vendor remediation, supporting security testing and vulnerability management, developing corrective action plans, and ensuring implementation of security controls across cloud and hybrid environments.…See more You will coordinate with MSPs, engineering, and operations teams while staying current with frameworks like SOC 2, ISO 27001, FedRAMP, and NIST 800-53. Experience in GRC, IT risk management, and regulatory compliance is required, with incident response and disaster recovery expertise valued.

Staff Data Engineer to architect and build fault-tolerant, scalable big-data platforms supporting high-velocity analytics use cases across Intuit. Responsibilities include designing data normalization, lineage, governance, and discoverability systems; collaborating with product and engineering teams on extensible platform design; and enabling analytics and GenAI/ML initiatives.…See more Requires 8+ years in product/web analytics, advanced SQL and big-data technologies (Redshift, Spark, Hive, BigQuery), Python or Java/Scala, and data pipeline orchestration experience. Role includes code reviews, CI/CD process ownership, mentorship, and translating business strategy into data-driven insights.

Staff Software Engineer on the AI Experience Framework (AIUX) team, responsible for full-stack architectural decisions in a JavaScript/component-driven environment powering ServiceNow's AI-first user interfaces. You will own code from design through delivery, architect modular reusable component systems, set framework-level technical direction for AI integration and state management, and serve as an escalation point for production issues across multiple teams.…See more The role requires 8+ years of OO language experience (Java, C++, C#, Go), advanced expertise in modern UI frameworks (React, Angular, Vue, Lit), relational databases, and data structures/algorithms/design patterns at scale.

Staff Software Engineer role owning full-stack architecture for ServiceNow's AI Experience Framework (AIUX), building modular Lit-based web components that power conversation-first applications. Responsible for end-to-end code delivery from design through production, setting technical direction for framework-level APIs, and serving as an escalation point for production issues across multiple teams.…See more Requires 8+ years of OO language experience (Java, C++, C#, Go), advanced JavaScript/modern UI framework expertise (Angular, React, Vue, Lit), and deep knowledge of data structures, algorithms, design patterns, and performance optimization. Expected to mentor colleagues, coordinate cross-org architecture decisions, and architect scalable component systems for extensibility.

This role performs continuous security monitoring, compliance assessments, and authorization documentation for Department of Defense information systems. The analyst will use tools like ACAS, SCAP, and eMASS to execute Risk Management Framework processes, conduct security audits, manage Plans of Action and Milestones (POA&Ms), and coordinate STIG remediation with system engineers and administrators.…See more The position requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+), and deep knowledge of RMF, system security plans, and automated compliance scanning. The analyst must be able to work independently, manage competing priorities, and be appointed Information System Security Officer (ISSO) within six months.

Staff IT Cloud Engineer at Qualcomm responsible for designing, implementing, and operating enterprise cloud environments across AWS, OCI, and Azure. Establish CI/CD/GitOps operating models, manage Kubernetes platforms, drive cloud governance and FinOps practices, and mentor engineers on infrastructure modernization and platform reliability.…See more Requires 10+ years of cloud/DevOps experience with advanced Terraform, Kubernetes, and enterprise cloud platform expertise; strong hands-on background in AWS, OCI, or Azure with deep understanding of cloud networking, security, and observability.

Lead a team of security engineers responsible for the operational effectiveness and innovation of security engineering controls across LPL Financial. Manage day-to-day operations and maintenance of critical security infrastructure including SIEM, EDR, DLP, vulnerability management, IAM systems, and network security appliances.…See more Drive continuous improvement initiatives, develop incident response playbooks, collaborate with engineering teams on security integration, and provide technical leadership and mentorship to junior engineers. Requires 10+ years in information security with at least 5 years in a security operations or engineering leadership role.

Design and build platform engineering infrastructure, tools, and automation for cloud-native environments on AWS, using Infrastructure as Code (Terraform/CDK), CI/CD, and observability practices. Develop reusable modules, APIs, CLIs, and service templates that improve developer experience and enforce security, compliance, and cost controls.…See more Establish monitoring, logging, alerting, SLOs, and incident response practices; participate in 24x7 on-call rotation with a focus on production reliability and automation. Requires 7+ years in DevOps, SRE, platform engineering, or cloud operations with deep hands-on experience in multi-account AWS setups, GitOps, and observability platforms like Datadog or Prometheus.

Design, build, and operate scalable platform infrastructure across Azure, AWS, and private cloud environments using infrastructure-as-code, Kubernetes, and automation tooling. Develop reusable platform capabilities, CI/CD pipelines, and self-service infrastructure for engineering teams.…See more Own platform initiatives end-to-end from technical design through production operations, including deployment automation, configuration management, observability, and lifecycle management. Requires 7+ years of platform engineering or DevOps experience, strong hands-on proficiency with Terraform, Ansible, Python/Go, Kubernetes, and Linux systems administration.

The Site Reliability Engineer owns the reliability, scalability, and operational readiness of production services running on AWS and Kubernetes. Responsibilities include designing highly available infrastructure with Terraform and managed AWS services, building CI/CD pipelines with GitHub Actions and Argo CD, defining SLOs and implementing observability with Prometheus and Grafana, leading incident response, and automating operational work with Python, Go, or Bash.…See more The role requires 3–8 years of hands-on SRE or DevOps experience, production Kubernetes expertise, strong AWS and infrastructure-as-code knowledge, and proficiency with observability and deployment strategies.

The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include analyzing cybersecurity directives and policies (CTOs, FRAGOs, IAVMs, STIG requirements), developing compliance strategies aligned with federal and defense security standards, and performing risk analysis and independent verification of security configurations.…See more The role requires in-depth Risk Management Framework knowledge, FISMA data reporting support, and use of compliance tracking tools such as VRAM. This position requires a Secret clearance, IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), and 10+ years of cybersecurity or incident response experience.

Lead complex contact center routing initiatives end-to-end for Intuit's GBSG business unit, from stakeholder discovery through Amazon Connect configuration, deployment, and production monitoring. Design and execute advanced routing strategies using CUP/CUE platforms, manage multi-region Amazon Connect environments, and analyze routing performance across channels using QlikSense, Splunk, and Databricks.…See more Serve as a routing and platform subject matter expert, provide guidance on design tradeoffs, and manage P0 incidents within SLA. Proactively apply generative AI tools to accelerate analysis, configuration work, and team workflows.

As Assistant Vice President and Chief Information Security Officer, you will lead cybersecurity strategy and enterprise information security for a major integrated health system. You'll oversee a team of security analysts, engineers, and architects, manage 24/7 security operations centers, and collaborate with executive leadership to develop comprehensive security strategy aligned with organizational goals.…See more The role requires ten years of leadership/management experience with at least five in information security, plus expertise in healthcare security regulations, governance, risk management, and regulatory compliance.

Staff-level AWS cloud security engineer responsible for designing, implementing, and enhancing security controls across AWS environments. The role involves monitoring and responding to security threats, conducting assessments, developing security standards and policies, and supporting AI/ML platforms and data pipelines.…See more Requires 8+ years of cybersecurity experience, 3+ years hands-on AWS security expertise, and an AWS Security certification, with strong knowledge of IAM, CloudTrail, Security Hub, GuardDuty, KMS, and VPC.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SAR), and managing eMASS tasking including quarterly IV&V, STIG checks, and annual security reviews.…See more The role requires 10+ years of cybersecurity or incident response experience, a Secret clearance, IAM II certification, and one of CAP, CASP, CISM, CISSP, or GSLC. The engineer must demonstrate proficiency in security testing, auditing, risk assessment, and IT security tools.

Shield AI seeks an experienced Site Reliability Engineer to establish and mature the SRE function across Hivemind's cloud infrastructure and platform services. This hands-on leadership role involves defining reliability targets (SLIs/SLOs), improving observability and incident response practices, investigating complex failures, and driving adoption of reliability-first engineering practices.…See more The SRE Lead will mentor teams, develop operational automation tooling, and manage the multi-quarter SRE roadmap while working closely with Cloud Engineering and product teams to enhance system resilience and operational excellence.

Build and test agent behavior for an AI-driven service, including test case design and evaluation checks distinct from traditional software testing. Support data ingestion pipelines using AWS and BigData tools (PySpark, Airflow), collaborate with product and senior engineers to ship features, and contribute to production support (monitoring, alerting, incident response).…See more Requires 1–2 years of software engineering experience, a Master's in Computer Science or related field, proficiency in Python or another backend language, SQL/NoSQL fundamentals, basic REST API design, and hands-on experience with at least one LLM project (tool calling, chaining, retrieval, or multi-step coordination). Self-directed learner excited about AI tooling and focused on shipping end-to-end products.

The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establishing governance frameworks aligned with industry standards like NIST, ISO, and SOC 2. The role requires leading threat detection, incident response, digital forensics, and vulnerability management while protecting client confidentiality and attorney-client privilege through robust technical and procedural controls.…See more The candidate must ensure secure architecture across cloud, on-premise, and hybrid environments and drive compliance with data protection and privacy regulations including GDPR, CCPA, and HIPAA. This is a senior executive position requiring 8+ years of cybersecurity experience and 6+ years in a senior leadership role managing global security programs.

The Cybersecurity Analyst owns Bumble Bee's day-to-day security operations, investigating and responding to incidents, hunting threats, and tuning detection tooling to close coverage gaps. Responsibilities include managing the full incident response lifecycle, optimizing SIEM platforms, conducting vulnerability assessments, performing access control audits, and building incident response playbooks and procedures.…See more The role requires 4+ years of cybersecurity experience, proficiency with SIEM platforms, EDR tools, vulnerability management platforms, and hands-on knowledge of Windows/Linux, networking, and the MITRE ATT&CK framework. Success demands both technical operations expertise and cross-functional collaboration to strengthen security posture, ensure compliance, and assess third-party cyber risk.

Software Integration Engineer responsible for designing, developing, and deploying a hybrid container/virtualization platform-as-code solution supporting enterprise-scale workloads across on-prem and cloud environments. The role involves integrating core platform services (identity, PKI, DNS, logging, monitoring, secrets management), configuring container runtimes and networking, and developing infrastructure-as-code automation.…See more Requires 9+ years of experience (or equivalent with advanced degree) with cloud platforms, Kubernetes, virtualization, DevSecOps practices, CI/CD tooling, and automation frameworks, plus the ability to mentor junior engineers and collaborate across security, platform, and application teams on compliance, incident response, and AI/ML workload enablement.

Lead multiple engineering teams building social experiences on the PlayStation platform, translating product objectives into technical plans across client applications, APIs, distributed services, and cloud infrastructure. Establish standards for software design, testing, deployment, and operations while managing 24/7/365 service reliability, incident response, and observability.…See more Coach engineers across career stages, partner cross-functionally with Product, Design, Data, and Security leaders, and evaluate responsible AI integration across development, testing, and customer-facing capabilities.

Lead the design, development, and operation of Qualcomm's enterprise AI platform, supporting agentic AI, model lifecycle management, and multi-cloud ML/inference infrastructure. Own core platform services including identity/RBAC, secrets, service meshes, observability, vector stores, and model gateways across on-prem GPU clusters and managed cloud services.…See more Manage a ~10-engineer global team (platform, SRE, MLOps/LLMOps), drive incident response and continuous improvement, and partner with product and security teams on AI governance and high-impact use cases.

Design, build, and maintain scalable batch and streaming data pipelines on AWS and Databricks, developing reusable data engineering frameworks and standardized patterns for ingestion, transformation, and validation. Leverage AI-based techniques to automate data quality checks, anomaly detection, and pipeline self-healing.…See more Define SLIs/SLOs, participate in on-call rotations, and mentor junior engineers while driving adoption of data frameworks and best practices across analytics, reporting, and AI/ML teams.

Conduct software security assessments, vulnerability testing, penetration testing, and threat analysis on TrellisWare products. Perform static and dynamic analysis, reverse engineering, and incident investigation while ensuring compliance with FIPS 140, NIST STIG, and other regulatory standards.…See more Requires 5+ years industry experience with 3+ years software development and 2+ years vulnerability testing, proficiency in Python/C++/Java, and at least one security certification (Security+, CISSP, OSCP, or SANS/GIAC).