nist-800-53 jobs in San Diego

Lead information systems security for a cleared defense contractor, managing a team of ISSOs and Security Administrators through the RMF process while ensuring compliance with NISPOM, DCSA, and NIST 800-53 standards. Responsibilities include vulnerability management, STIG compliance, security incident investigation, insider threat coordination, and preparation for DCSA assessments.…See more Requires 8+ years IT experience with 5+ years as an ISSM in a cleared facility, proficiency in Windows/Linux, eMASS, Tenable, SIEM tools, and IAM Level 3 certification (CISSP, CISM, or GSLC). Strong background in container orchestration, infrastructure automation, and DevSecOps methodologies is valued.

Serve as an independent, third-party cybersecurity assessor and RMF (Risk Management Framework) team lead for Navy systems under the NSWC Corona CCAM contract. Execute comprehensive security assessments of IT, PIT, and OT systems against DoD and NAVSEA standards; validate NIST 800-53 control implementations; analyze vulnerability data and STIG compliance; generate Security Assessment Reports and Risk Assessment Reports; and provide mentorship to ISSMs and ISSOs.…See more Requires NQV Level III certification, active TS/SCI clearance, seven years of cybersecurity experience with four years in RMF assessments, and DoD 8570 IAM Level II/III baseline certification.

Lead cybersecurity operations for Naval Surface Warfare Center Corona enclaves and Platform IT systems, owning the complete Risk Management Framework (RMF) Authorization to Operate process under DoD Instruction 8510.01. Oversee ISSOs and System Administrators, develop and maintain System Security Plans, Security Assessment Reports, and Risk Assessment Reports, and manage eMASS records for continuous compliance monitoring.…See more Direct incident response, enforce configuration management policies through Change Control Boards, and conduct STIG/ACAS/SCAP compliance reviews. Requires TS/SCI clearance, Master's in Computer Science/Cybersecurity or equivalent, 8+ years cybersecurity experience, and current DoD 8140/8570 Level III certification (CISSP, CISM, CASP+, or equivalent).

Information System Security Officer III responsible for securing assigned networks, enclaves, and platform IT systems through vulnerability assessments, STIG compliance verification, and continuous monitoring. The role requires coordinating with engineers and developers to embed security throughout the system development lifecycle, managing RMF documentation and POA&M entries, conducting daily audit log and SIEM alert reviews, and supporting incident response and cyber inspections.…See more Must possess TS/SCI clearance, a bachelor's degree in IT/cybersecurity or equivalent experience, six years of hands-on security implementation and vulnerability analysis, and current DoD 8140/8570 IAM Level II certification.

Senior technical leader responsible for integrating AI/ML systems into secure, scalable DoD-compliant environments. Will architect AI system deployments, establish DevSecOps practices, ensure compliance with RMF/NIST 800-53/DISA STIG standards, and provide technical guidance across engineering teams.…See more Requires deep expertise in AI/ML production systems, containerization, CI/CD, and cybersecurity controls, with hands-on experience in Python, Kubernetes, and modern infrastructure tooling.

Technology Manager reporting to a chief technology officer, responsible for defining enterprise architecture strategy, governing technical standards across applications, data, infrastructure, security, and AI/automation. Oversee architectural solution delivery, lead architecture quality assurance and governance, and manage a technical team while balancing multiple concurrent projects.…See more Translate business objectives into scalable, secure, cloud-native designs aligned with zero-trust principles and NIST controls.

This role involves conducting comprehensive security assessments of AI systems and deployments, evaluating them against NIST frameworks (AI RMF, CSF, 800-53, 800-171) and other security standards. The consultant will identify AI-specific risks such as prompt injection, model misuse, data leakage, and supply-chain vulnerabilities across cloud platforms (AWS, Azure, hybrid).…See more Responsibilities include developing AI governance frameworks, policies, and controls; assessing AI development environments, model pipelines, APIs, and orchestration layers; and delivering executive-level recommendations and remediation roadmaps. Requires 7+ years of cybersecurity/consulting experience and 3+ years supporting AI/machine learning security initiatives, with strong expertise in AI threat modeling, secure AI deployment, and governance frameworks.

Staff-level hands-on security engineer responsible for designing and implementing platform security across Crucible, cloud infrastructure, and edge deployments. You will write code, harden Kubernetes and Linux systems, build identity and access controls, secure the software supply chain, and automate security into CI/CD workflows.…See more The role requires 8+ years of security engineering experience, strong software engineering skills, deep cloud and container security expertise, and the ability to support accreditation processes like ATO.

The Security Control Assessor – Representative will perform risk-based reviews and evaluations of system security plans (SSPs) for classified systems under the Risk Management Framework (RMF), making authorization recommendations. The role requires expert knowledge of NIST 800-53 security controls, DoD/DCSA policies, and the NISP eMASS platform to assess compliance artifacts, document findings, and provide defensible security authorization decisions.…See more The candidate must hold an IAT Level II certification (Security+, CCNA Security, CSA+, GICSP, GSEC, or SSCP) and an active Secret clearance to evaluate classified system packages against government technical standards.

As an Information System Security Manager, you will oversee cybersecurity and operations of multiple classified systems, managing personnel and developing enterprise-wide RMF-based information security policies, standards, and procedures. You will maintain compliance with federal and DoD security standards, create and maintain System Security Plans, conduct continuous monitoring, perform risk assessments, and investigate security incidents.…See more You will coordinate with ISSEs, ISAs, and other security roles to design, procure, build, and accredit complex networks and systems across multiple classification levels. Required: Bachelor's degree in Information Security/IT or equivalent with 10+ years experience, DoD 8570.01-M IAM level III certification (CISSP, CISM, GSLC, or CCISO), RMF and NIST 800-53 expertise, and an active TS/SCI clearance.

Halcyon seeks a Senior Information Security Specialist to strengthen enterprise security posture through third-party risk assessment, compliance coordination, policy development, and incident response preparedness. The role involves managing vendor remediation, supporting security testing and vulnerability management, developing corrective action plans, and ensuring implementation of security controls across cloud and hybrid environments.…See more You will coordinate with MSPs, engineering, and operations teams while staying current with frameworks like SOC 2, ISO 27001, FedRAMP, and NIST 800-53. Experience in GRC, IT risk management, and regulatory compliance is required, with incident response and disaster recovery expertise valued.

A senior DevSecOps engineer will design and operate an automated compliance and AI-driven security platform for DoD and federal healthcare environments. The role demands expertise in DISA STIG automation, container security, RMF/FedRAMP workflows, and SIEM/SOAR integration, with responsibilities spanning secure CI/CD pipeline development, Wazuh and Elastic Stack deployment, OpenRMF automation, and LLM-assisted security operations.…See more The engineer will build hardened base images, maintain compliance pipelines, develop Tines SOAR workflows, and mentor others on architecture decisions.

Develop and integrate SharePoint and Microsoft Power Platform solutions with enterprise systems, focusing on data integration, workflow automation, and Microsoft 365 services. Design technical solutions that translate business requirements into automated processes, data models, and secure applications.…See more Ensure DoD compliance, implement security controls per RMF/NIST standards, and provide technical support and documentation. Requires 3+ years of hands-on SharePoint/Power Platform experience, Security+ certification, and an active Secret clearance.

Design, build, and maintain secure enterprise data platforms supporting AI/ML workloads, with responsibility for database optimization, CI/CD automation, and DoD compliance. Mentor junior engineers and provide technical leadership on architecture decisions.…See more Implement security controls aligned with NIST 800-53, RMF, and DISA STIG standards throughout the platform lifecycle. Develop ETL/ELT pipelines, support data lakes and lakehouses, and evaluate emerging data technologies for mission fit.

Lead an enterprise architecture team at a government IT modernization company, reporting to the CTO/CISO. Partner with executive leadership to develop technology strategy, govern technical standards across cloud, data, integration, infrastructure, security, and AI/automation, and oversee architectural quality and compliance.…See more Mentor technical teams, manage multiple concurrent projects, and ensure architectural decisions align with business objectives and zero-trust/NIST security principles.

Senior DevOps Build Engineer responsible for designing, building, and maintaining CI/CD pipelines that compile, test, package, and publish software across defense and government contract programs. The role owns build automation, release engineering, artifact management, and container registries end-to-end, while integrating security and compliance checks directly into the build process.…See more Requires 8+ years of hands-on experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins), strong scripting skills in Python and Bash, and proficiency with containerization, artifact management, and cloud platforms (AWS or Azure). The engineer will partner with development, security, and compliance teams to deliver self-service tooling and standardize builds across unclassified and controlled unclassified environments.

Architect and maintain ServiceNow security controls aligned to DoD Zero Trust architecture in FedRAMP High and DoD IL4/IL5 environments. Configure role-based access controls (RBAC), access control lists (ACLs), data policies, and edge encryption; maintain security matrices and enforce information-level segregation.…See more Develop System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts to support ATO attainment and sustainment. Conduct vulnerability assessments, continuous monitoring, manage Plans of Action and Milestones (POA&M), and generate security assessment reports.

Senior DevOps Build Engineer responsible for designing and maintaining CI/CD pipelines, build automation, and artifact management systems across defense and government contract programs. The role owns end-to-end build and release engineering, standardizing compilation, packaging, versioning, and promotion across unclassified and controlled environments while integrating security and compliance checks into the build process.…See more Key responsibilities include pipeline design (GitLab CI, GitHub Actions, Jenkins), artifact repository management, build tooling development (Bash, Python, Bazel, Gradle), container image management, and infrastructure provisioning using Terraform. The position requires 8+ years of build/release engineering or DevOps experience, strong scripting skills, and U.S. citizenship with the ability to obtain a security clearance.