nist-cybersecurity-framework jobs in San Diego

Lead vulnerability and patch management operations across infrastructure, middleware, and applications for Deloitte's Cyber Defense & Resilience team. Prioritize remediation activities using threat intelligence, exploitability data, and attack paths; manage remediation workflows and patch deployment at scale.…See more Mentor junior practitioners, develop client deliverables, and drive process improvements that reduce cyber risk. Requires 10+ years in IT/information security with hands-on experience in vulnerability management tools, remediation automation, and ITSM platforms.

Senior security engineer responsible for conducting comprehensive vulnerability assessments across OT/IT infrastructure at a water utility, including PLCs, SCADA systems, HMIs, network devices, and remote telemetry sites. Will evaluate architecture, network segmentation, boundary security, remote/vendor access controls, patch management, and governance practices against industry standards (IEC 62443, NIST SP 800-82).…See more Deliverables include risk-rated findings, prioritized remediation roadmaps, and executive-level reporting. Requires 6+ years cybersecurity experience with at least 3 years hands-on OT/ICS work and completion of at least two end-to-end OT security assessments.

This role involves conducting comprehensive security assessments of AI systems and deployments, evaluating them against NIST frameworks (AI RMF, CSF, 800-53, 800-171) and other security standards. The consultant will identify AI-specific risks such as prompt injection, model misuse, data leakage, and supply-chain vulnerabilities across cloud platforms (AWS, Azure, hybrid).…See more Responsibilities include developing AI governance frameworks, policies, and controls; assessing AI development environments, model pipelines, APIs, and orchestration layers; and delivering executive-level recommendations and remediation roadmaps. Requires 7+ years of cybersecurity/consulting experience and 3+ years supporting AI/machine learning security initiatives, with strong expertise in AI threat modeling, secure AI deployment, and governance frameworks.

As a Security Engineer II on Deloitte's Cyber Defense & Resilience CTEM team, you'll support clients in identifying, prioritizing, and remediating security exposures across complex infrastructure, middleware, and applications. You'll execute vulnerability and patch management tasks, analyze exposure data and attack paths to guide remediation priorities, and prepare client-facing dashboards and status reports.…See more The role requires 3+ years in IT security or vulnerability/patch management, hands-on experience remediating vulnerabilities across Linux, Windows, and applications, and proficiency with patch management tools (BigFix, MECM, Red Hat Satellite, WSUS, Tenable, Rapid7, Qualys) and scripting/automation languages (PowerShell, Bash, Python, Ansible, Terraform, JSON). You'll also coordinate remediation activities via ServiceNow or similar ITSM platforms and travel up to 50%.

Senior Manager leading cloud security architecture and strategy across AWS, Azure, GCP, and Oracle Cloud for consulting engagements. Oversees technical assessments, solution designs, and security implementations including CNAPP, CSPM, CWPP, IAM, and DevSecOps controls.…See more Manages onshore and offshore delivery teams, mentors practitioners, and contributes to business development and thought leadership. Requires 6+ years in cloud security consulting, 2+ years designing enterprise cloud security architectures, and 3+ years with cloud-native security technologies.

Design and develop security strategies for Abbott's cloud-based medical devices and applications, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Conduct web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools. Leverage AI-assisted development and cybersecurity tools—including building agentic AI applications—to automate security deliverables, with responsibility for evaluating AI tools for safe, policy-compliant use and mitigating AI/LLM-specific risks.