malware-analysis jobs in San Diego

Senior Reverse Engineer role focused on reverse engineering complex software, firmware, and embedded systems across Windows, Linux, and non-traditional architectures. Responsibilities include developing automated binary analysis tools, vulnerability weaponization and exploit development, and working in multi-disciplinary teams on offensive cyber solutions.…See more Requires 5+ years of experience, proficiency in C/C++ and Assembly languages, and hands-on expertise with disassembly tools like IDA Pro, Binary Ninja, or Ghidra.

Lead high-severity incident investigations, mentor L1/L2 analysts, and drive detection engineering at a cybersecurity services firm. Responsibilities include threat hunting, malware analysis, digital/network forensics, SIEM/EDR tuning (KQL, SPL, Sigma, YARA), playbook development, and automation scripting in Python/PowerShell/Bash.…See more This is a 5+ year senior incident responder role requiring deep hands-on expertise across the full incident response lifecycle, MITRE ATT&CK, and client-facing technical briefings.

Lead information security engineer responsible for designing and implementing comprehensive security architectures across ICW Group's IT and business technology infrastructure. Will conduct risk assessments, penetration tests, and security compliance reviews; partner with systems engineering and project management teams to ensure secure design throughout the development lifecycle; and lead remediation strategies for identified vulnerabilities.…See more Requires 10+ years of security engineering experience, AWS cloud security expertise (3–5 years preferred), and hands-on proficiency with IDS/IPS, firewalls, SIEM, forensics tools, and endpoint security solutions.

Information Security Engineer III will lead security architecture reviews and threat modeling for data, analytics, AI, and cloud initiatives at an insurance company. The role involves designing and implementing security controls for AWS data platforms and AI/ML workloads, providing oversight of LLM usage and emerging AI threats, and mentoring engineering teams on secure development practices.…See more You will partner with Engineering, Cloud, Data, and Operations teams to embed security into system design, manage compliance with NIST, NYDFS, PCI DSS, and CPRA/CCPA standards, and evaluate third-party vendors and security tools. The position requires 8+ years of security engineering experience, 3-5 years in AWS cloud security, and expertise in threat modeling, risk assessment, and incident management.

Build, deploy, and continuously improve MITRE ATT&CK–aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, and retirement, advancing a detection-as-code platform with version control, peer review, automated testing, and CI/CD.…See more Evaluate AI-powered security capabilities including LLMs, anomaly detection, and response automation. Partner with Security Operations on investigations, incidents, and detection maintenance.

Cloud Security Engineer III responsible for designing, implementing, and maintaining security controls across the company's infrastructure with a focus on AI/ML platforms. The role involves monitoring AI/ML systems for anomalous behavior, identifying and remediating vulnerabilities in ML pipelines, and collaborating with data scientists to implement secure AI/ML solutions.…See more Requires 8+ years of security engineering experience, 3-5 years of AWS cloud security expertise, AWS Security Certification, and foundational knowledge of ML lifecycle and AI/ML security concepts.

As a Principal Software Reverse Engineer, you will perform advanced reverse engineering on complex software and firmware targets across Windows, Linux, and embedded systems, developing automated binary analysis tools to characterize protocols and functionality. You will lead multi-discipline technical teams, conduct vulnerability research and exploit development, and present findings to customers and leadership.…See more This role requires 15+ years of hands-on experience with disassembly tools (IDA Pro, Binary Ninja, Ghidra), proficiency in Assembly languages (x86, ARM) and programming languages (C/C++, Python), and deep expertise in exploitation, cybersecurity solutions, and firmware analysis.

Senior Staff Product Security Engineer responsible for security incident response, vulnerability detection and mitigation across Qualcomm products, particularly in mobile, IoT, and automotive domains. The role involves binary analysis and reverse engineering of exploits, secure code review, vulnerability assessment, security testing, and coordinating with external security researchers and customers on patch adoption and disclosure.…See more Requires 6+ years of security engineering experience with expertise in at least two areas such as binary analysis, incident response, fuzzing, malware analysis, embedded firmware security, or automotive security. Must work independently, evaluate new security tools and technologies, and communicate technical findings internally and externally.

This is a hands-on security engineering role focused on running Saronic's cyber threat intelligence program. The engineer will track nation-state and advanced criminal adversaries targeting the defense industrial base, operationalize indicators and TTPs into detections and hunts, produce finished intelligence products, and fuse external threat feeds with internal telemetry to prioritize real exposures.…See more The role requires 4+ years in cyber threat intelligence, threat hunting, detection engineering, or intrusion analysis with demonstrable experience tracking sophisticated or state-sponsored adversaries.