iso-27001 jobs in San Diego

An Associate Cybersecurity Engineer will monitor security alerts from SIEM, EDR, and IDS/IPS tools to detect and triage security incidents, then investigate confirmed events and support containment and recovery efforts. The role includes threat analysis, vulnerability validation, security awareness training administration, and phishing simulation campaign execution.…See more The engineer will document investigations, maintain runbooks and playbooks, and collaborate with Security, IT, and DevOps teams while supporting compliance frameworks (SOC 2, ISO 27001, PCI DSS).

Lead vulnerability and patch management operations across infrastructure, middleware, and applications for Deloitte's Cyber Defense & Resilience team. Prioritize remediation activities using threat intelligence, exploitability data, and attack paths; manage remediation workflows and patch deployment at scale.…See more Mentor junior practitioners, develop client deliverables, and drive process improvements that reduce cyber risk. Requires 10+ years in IT/information security with hands-on experience in vulnerability management tools, remediation automation, and ITSM platforms.

The IT Manager will lead all IT infrastructure, cybersecurity, and regulatory compliance operations for a healthcare organization. Key responsibilities include designing and maintaining secure cloud, network, and endpoint systems; serving as the HIPAA compliance authority; establishing incident response procedures; managing vendor and third-party risk; and providing executive advisory on technology strategy and risk.…See more The role demands extensive IT/cybersecurity leadership experience, deep HIPAA and healthcare data-protection expertise, and the ability to build compliance frameworks and security controls from the ground up.

The MarkLogic Developer builds and maintains enterprise MarkLogic database platforms supporting XML/JSON-based data models, semantic data integrations, and search-driven solutions. Responsibilities include developing XQuery and SPARQL queries, supporting data ingestion pipelines, optimizing cluster performance, and ensuring compliance with SOC 2 and ISO 27001 standards through RBAC, encryption, and audit logging.…See more The role requires 2+ years of database engineering experience and 1+ years hands-on MarkLogic work, with expertise in MarkLogic indexing, search configuration, data ingestion frameworks (MLCP, Data Hub Framework), and security controls.

Director of IT seeking an experienced leader to oversee IT governance, compliance, and risk management for a biotech company. Responsibilities include drafting and maintaining IT policies aligned with regulations (GDPR, HIPAA, ISO 27001, FDA 21 CFR Part 11, SOX), leading internal and external audits, conducting risk assessments, developing IT quality management systems, and managing an IT team and budget.…See more The role requires 8+ years of IT experience with 3+ years in leadership, strong technical writing ability, and expertise in cloud platforms, network security, and data privacy.

A Senior Endpoint Engineer will stand up and manage Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID) and endpoint management platforms (Intune, Jamf) from scratch in a startup environment. Responsibilities include designing IT onboarding/offboarding workflows, implementing endpoint security policies (EDR, disk encryption, patch management, conditional access), managing vendor relationships and budgets, and providing Tier 1/2 technical support.…See more The role requires 4+ years of hands-on IT operations or systems administration experience, deep proficiency with Microsoft 365 and MDM/UEM platforms, strong networking fundamentals, and scripting ability (PowerShell, Bash, or Python); must support SOC 2 and ISO 27001 compliance.

As a Security Engineer II on Deloitte's Cyber Defense & Resilience CTEM team, you'll support clients in identifying, prioritizing, and remediating security exposures across complex infrastructure, middleware, and applications. You'll execute vulnerability and patch management tasks, analyze exposure data and attack paths to guide remediation priorities, and prepare client-facing dashboards and status reports.…See more The role requires 3+ years in IT security or vulnerability/patch management, hands-on experience remediating vulnerabilities across Linux, Windows, and applications, and proficiency with patch management tools (BigFix, MECM, Red Hat Satellite, WSUS, Tenable, Rapid7, Qualys) and scripting/automation languages (PowerShell, Bash, Python, Ansible, Terraform, JSON). You'll also coordinate remediation activities via ServiceNow or similar ITSM platforms and travel up to 50%.

Halcyon seeks a Senior Information Security Specialist to strengthen enterprise security posture through third-party risk assessment, compliance coordination, policy development, and incident response preparedness. The role involves managing vendor remediation, supporting security testing and vulnerability management, developing corrective action plans, and ensuring implementation of security controls across cloud and hybrid environments.…See more You will coordinate with MSPs, engineering, and operations teams while staying current with frameworks like SOC 2, ISO 27001, FedRAMP, and NIST 800-53. Experience in GRC, IT risk management, and regulatory compliance is required, with incident response and disaster recovery expertise valued.

The Applied AI Engineer develops, deploys, and maintains generative AI solutions for insurance products and customer experiences. Responsibilities include implementing end-to-end AI/ML pipelines using AWS services (SageMaker, Lambda, ECS/EKS), feature engineering with Snowflake, model fine-tuning and testing, and monitoring production performance.…See more The role requires 3+ years of AI/ML experience with 1–2 years in generative AI or LLMs, hands-on cloud deployment experience, and proficiency in Python, PyTorch, TensorFlow, or Hugging Face Transformers.

As a Senior Platform Engineer at ReflexAI, you will design and maintain multi-cloud infrastructure across GCP and AWS using Terraform, Kubernetes, and GitHub, while building golden paths and guardrails that improve developer velocity. You'll own observability and monitoring with Datadog, strengthen security posture through IAM and container security best practices, and establish compliance workflows for SOC 2, HIPAA, and other industry standards.…See more This is a hands-on role requiring 5–7+ years of DevOps/SRE/platform engineering experience, deep cloud expertise, and CI/CD pipeline proficiency. You'll work cross-functionally to reduce operational toil and support an AI-driven product serving crisis support, healthcare, and enterprise customers.

Senior IT Engineer responsible for enterprise Slack administration, SaaS platform governance, and integration automation across hybrid cloud and on-prem environments. Build and operate Slack apps, bots, and workflows using the Slack API and Bolt framework; design CI/CD pipelines and infrastructure-as-code for SaaS configuration management.…See more Implement identity protocols (SAML 2.0, OAuth 2.0, OIDC, SCIM) and automate routine SaaS operations using Python and Bash. Provide tier-2/3 support, troubleshoot complex integration issues, and partner with Security and Compliance teams on standards and incident response.

Conduct software security assessments, vulnerability testing, penetration testing, and threat analysis on TrellisWare products. Perform static and dynamic analysis, reverse engineering, and incident investigation while ensuring compliance with FIPS 140, NIST STIG, and other regulatory standards.…See more Requires 5+ years industry experience with 3+ years software development and 2+ years vulnerability testing, proficiency in Python/C++/Java, and at least one security certification (Security+, CISSP, OSCP, or SANS/GIAC).

As an AWS Cloud Security Engineer, you'll conduct hands-on security assessments and engineering for enterprise AWS environments, reviewing Organizations, accounts, landing zones, IAM, networking, and security services to identify gaps and strengthen cloud posture. You'll work with AWS-native services (IAM, CloudTrail, GuardDuty, Security Hub, KMS, etc.), develop Terraform Infrastructure as Code, establish secure configuration baselines, create security policies and guardrails, and translate technical requirements into scalable, repeatable solutions.…See more You'll collaborate with cloud architects, security engineers, platform teams, and client leadership to deliver implementation-ready documentation and cloud governance improvements. The role requires 3+ years of AWS cloud engineering, cloud security, or DevSecOps experience, with hands-on expertise in multi-account AWS environments, VPC networking, security monitoring services, and Infrastructure as Code.

Own day-to-day compliance operations for a healthcare AI company, managing frameworks (SOC2 Type II, HIPAA, NIST, ISO), controls, and policies; triage and remediate failing compliance tests; administer Google Workspace and MDM for workforce security; coordinate external audits end to end; and track risk via assessments and remediation planning. This is a hands-on role requiring direct ownership of remediation from detection to closure, not ticket routing—you'll operate with high rigor in a fast-scaling startup while partnering across engineering, product, and leadership.See more

Senior Manager leading cloud security architecture and strategy across AWS, Azure, GCP, and Oracle Cloud for consulting engagements. Oversees technical assessments, solution designs, and security implementations including CNAPP, CSPM, CWPP, IAM, and DevSecOps controls.…See more Manages onshore and offshore delivery teams, mentors practitioners, and contributes to business development and thought leadership. Requires 6+ years in cloud security consulting, 2+ years designing enterprise cloud security architectures, and 3+ years with cloud-native security technologies.

Lead technical administration of ONI's Microsoft environment, including Microsoft 365, Microsoft Entra ID, SSO, and endpoint management across mixed Windows, macOS, and iOS devices. Own the full IT asset lifecycle from procurement through retirement, manage user identity and access controls with security best practices, and drive IT projects and process improvements.…See more Serve as senior technical escalation point for complex issues, maintain business continuity procedures, and coordinate with vendors and internal stakeholders on security compliance (GDPR, Cyber Essentials, ISO 27001) and incident response.

Design and implement security strategies for Abbott's cloud-based applications and medical devices, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Leverage AI-assisted development tools and cybersecurity platforms to automate vulnerability analysis, evidence collection, and remediation tracking. Conduct hands-on web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools, with demonstrated experience in product security and medical device environments preferred.

Lead a team of security engineers responsible for deploying, integrating, optimizing, and managing enterprise cybersecurity platforms including SIEM (Splunk, Elasticsearch), XDR, EDR, email gateways, and vulnerability management across on-premises and cloud environments. Develop and execute cybersecurity tooling strategy aligned with business objectives, regulatory requirements (NIST CSF, ISO 27001, SOC 2, PCI-DSS), and industry best practices.…See more Automate threat detection, response, compliance reporting, and operational workflows using Python, PowerShell, and Bash. Mentor security engineering teams while managing budgets, cross-functional partnerships, and executive reporting on security posture and tooling effectiveness.

Design and develop security strategies for Abbott's cloud-based medical devices and applications, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Conduct web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools. Leverage AI-assisted development and cybersecurity tools—including building agentic AI applications—to automate security deliverables, with responsibility for evaluating AI tools for safe, policy-compliant use and mitigating AI/LLM-specific risks.

Director-level role leading cyber architecture strategy and teams at an enterprise consulting firm. Responsibilities include architecting secure cloud and AI-enabled solutions, guiding security controls and design patterns, mentoring security professionals, and providing technical thought leadership on emerging technologies like generative AI and agentic systems.…See more Requires 10+ years of security architecture experience, expertise across IaaS/PaaS/SaaS platforms, and proven ability to influence enterprise technology strategy while balancing business enablement with risk management.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.

The Information Systems Security Manager will develop, implement, and maintain the company's information security policies and compliance programs aligned with NIST SP 800-171, DFARS, ISO 27001, and CMMC requirements. Responsibilities include overseeing Controlled Unclassified Information (CUI) and classified information protection, conducting risk assessments and vulnerability analyses, leading incident response efforts, and serving as primary liaison with government agencies on compliance matters.…See more The role requires 7+ years of information security management experience with at least 3 years in a leadership position, and extensive knowledge of defense industry security standards and classified information handling protocols. The ISSM will collaborate with DevSecOps, IT, and engineering teams to integrate security controls across operations and maintain continuous Authority to Operate (cATO) pipelines.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

Serve as a primary administrator for core security technologies including Microsoft Defender Suite, Entra ID, Conditional Access, and endpoint protection, while also administering enterprise infrastructure across Microsoft 365, Azure, AWS, VMware, and hybrid platforms. Troubleshoot complex infrastructure and security issues, manage cloud backup and disaster recovery, monitor alerts through LogicMonitor and SIEM/MDR/SOCaaS services, and coordinate with security operations teams on investigations and remediation.…See more Requires 8+ years of hands-on experience in cybersecurity and infrastructure engineering in business-critical environments, with deep expertise in Microsoft identity and security technologies, cloud platforms, vulnerability management, and enterprise backup solutions. Participate in after-hours support and escalation activities as needed.