iso-27001 jobs in San Diego

Director-level role leading cyber architecture strategy and teams at an enterprise consulting firm. Responsibilities include architecting secure cloud and AI-enabled solutions, guiding security controls and design patterns, mentoring security professionals, and providing technical thought leadership on emerging technologies like generative AI and agentic systems.…See more Requires 10+ years of security architecture experience, expertise across IaaS/PaaS/SaaS platforms, and proven ability to influence enterprise technology strategy while balancing business enablement with risk management.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.

The Information Systems Security Manager will develop, implement, and maintain the company's information security policies and compliance programs aligned with NIST SP 800-171, DFARS, ISO 27001, and CMMC requirements. Responsibilities include overseeing Controlled Unclassified Information (CUI) and classified information protection, conducting risk assessments and vulnerability analyses, leading incident response efforts, and serving as primary liaison with government agencies on compliance matters.…See more The role requires 7+ years of information security management experience with at least 3 years in a leadership position, and extensive knowledge of defense industry security standards and classified information handling protocols. The ISSM will collaborate with DevSecOps, IT, and engineering teams to integrate security controls across operations and maintain continuous Authority to Operate (cATO) pipelines.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

Serve as a primary administrator for core security technologies including Microsoft Defender Suite, Entra ID, Conditional Access, and endpoint protection, while also administering enterprise infrastructure across Microsoft 365, Azure, AWS, VMware, and hybrid platforms. Troubleshoot complex infrastructure and security issues, manage cloud backup and disaster recovery, monitor alerts through LogicMonitor and SIEM/MDR/SOCaaS services, and coordinate with security operations teams on investigations and remediation.…See more Requires 8+ years of hands-on experience in cybersecurity and infrastructure engineering in business-critical environments, with deep expertise in Microsoft identity and security technologies, cloud platforms, vulnerability management, and enterprise backup solutions. Participate in after-hours support and escalation activities as needed.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), driving control remediation to closure, administering Google Workspace and MDM, coordinating external audits, and maintaining audit-readiness. This role requires hands-on management of a compliance platform of record, continuous monitoring of compliance tests, security policy maintenance, evidence collection, and risk tracking—operating with high rigor in a fast-scaling startup without routing issues to others.See more

Lead a team of cloud engineers building the nervous system for Brain Corp's fleet of 30,000+ autonomous mobile robots. Own the platform's reliability, roadmap, and architecture while managing team hiring, onboarding, and career development.…See more Drive high-performance delivery across robot and customer-facing interfaces, balance competing priorities (performance, cost, reliability, scalability), and partner with principal and staff engineers on long-term platform strategy. Stay hands-on enough to make sound architectural decisions and earn senior engineer trust during a period of significant growth.

Lead a team of cloud engineers building the backend platform that powers Brain Corp's global fleet of 30,000+ autonomous mobile robots. Own the platform's reliability, roadmap, and architecture as it scales to support fleet operations and customer-facing applications.…See more Balance hands-on technical leadership with people management—mentor engineers, drive hiring and onboarding, own production reliability and incident response, and partner with principal/staff engineers on distributed-systems architecture. Navigate tradeoffs between performance, cost, reliability, and scalability while shipping features that robots in the field depend on.

The Applied AI Engineer develops, deploys, and maintains generative AI solutions for insurance products and internal workflows. The role involves implementing end-to-end AI pipelines using AWS services (SageMaker, Lambda, ECS/EKS, S3), building feature engineering workflows in Snowflake, and collaborating with cloud and MLOps teams.…See more Candidates need 3+ years of AI/ML engineering experience with 1–2 years focused on generative AI or LLMs, proficiency in Python and frameworks like PyTorch or Hugging Face Transformers, and hands-on cloud deployment experience. The position requires monitoring model performance, ensuring security and compliance, and supporting AI architecture reviews.

This is a hands-on product security role focused on threat modeling and cybersecurity risk management for medical devices and SaMD platforms. You'll conduct security risk assessments, build FDA submission documentation (510(k) files, risk management files, SBOMs), review security architecture, and maintain risk and vulnerability management plans.…See more The role requires 5+ years of cybersecurity or product security experience, with strong preference for FDA documentation and regulated medical device background, and working knowledge of NIST frameworks, OWASP, and secure SDLC practices.

This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation.…See more The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance platforms (SOC2 Type II, HIPAA, NIST, ISO), administering Google Workspace and MDM, driving remediation of failing controls to closure, and coordinating external audits. Monitor compliance tests continuously, maintain security policies and evidence collection, and work cross-functionally with engineering and leadership to keep the company audit-ready at scale.…See more The role requires hands-on compliance platform administration (Vanta, Drata, or similar), not purely administrative ticket routing.