nist-sp-800-171 jobs in San Diego

As a Research Cybersecurity Analyst, you will review research contracts, proposals, and data-use agreements to identify security and compliance requirements, then conduct risk assessments and recommend practical safeguards. You will coordinate security controls across cloud and on-premises research environments, assess architectures for identity management, encryption, and network segmentation, and develop compliance documentation (SSPs, POA&Ms) for sponsor audits and CMMC readiness.…See more You will work with researchers, IT teams, and compliance partners to interpret regulatory requirements, map them to controls, and explain technical security obligations in practical terms to non-technical stakeholders. Experience in NIST frameworks, security assessments, vulnerability management, and regulated environments (higher education, research, healthcare, government, defense) is especially valued.

This role supports research teams at a university by reviewing security requirements in research contracts and proposals, conducting risk and compliance assessments, and recommending practical security approaches. The analyst will coordinate security controls across cloud and on-premises research environments, assess security architectures and configurations, and develop compliance documentation including SSPs and POA&Ms.…See more The role requires interpreting cybersecurity frameworks (NIST SP 800-171, CMMC, NIST SP 800-53) and communicating technical requirements to researchers and non-technical stakeholders across identity and access management, encryption, vulnerability management, and network security.

Research Cybersecurity Analyst at San Diego State University responsible for reviewing research proposals, contracts, and data-use agreements to identify cybersecurity and compliance requirements; conducting risk assessments and recommending remediation strategies; coordinating security controls across cloud and on-premises research environments; and developing compliance documentation (SSPs, POA&Ms) to support audits and assessments. The role requires interpreting security frameworks (NIST SP 800-171, CMMC, NIST SP 800-53) and communicating technical requirements to researchers and non-technical stakeholders while evaluating security architectures, access controls, encryption, and vulnerability management.See more

Senior IT Cyber Security Specialist responsible for enterprise vulnerability scanning, system hardening, and patch management using tools like Nessus and HBSS. Administers security technologies including SIEM platforms, firewalls, endpoint protection, and VPNs while investigating security incidents and performing root cause analysis.…See more Requires 7+ years of progressive IT/cybersecurity experience in DoD or defense contractor environments, with strong Linux administration and Bash scripting skills. Must hold DoD 8570.1-M IAM Level III certification (CISSP, CISM, or GSLC) and maintain compliance with NIST SP 800-171, CMMC Level 2, and DISA STIGs.

The IT Cybersecurity Specialist will architect and implement ServiceNow-specific security controls (RBAC, ACLs, Data Policies, Edge Encryption) aligned to DoD Zero Trust Strategy for the Blue UAS Cleared List platform. The role requires developing and maintaining System Security Plans and RMF artifacts, mapping ServiceNow configurations to NIST SP 800-53 and NIST SP 800-171/172 standards, and tracking POA&M to remediate vulnerabilities and maintain Authority to Operate.…See more The specialist will coordinate with Government IT Program Managers and Authorizing Officials, conduct continuous monitoring, provide Security Assessment Reports, and ensure personnel meet DoDM 8140.03 certification requirements. This position requires a bachelor's degree, five years of practical cybersecurity experience, active DoD security clearance, and demonstrated expertise securing ServiceNow instances in FedRAMP High and DoD IL4/IL5 environments.

Design and implement secure system architectures for complex defense and aerospace programs, ensuring compliance with DoD and NIST cybersecurity standards (DORI 8500.02, CNSSI 1253, NIST SP 800-53, NIST SP 800-171). Perform vulnerability assessments, risk management, and security evaluations across hardware and software; develop Risk Management documents and Secure Technical Implementation Guides; serve as liaison between cybersecurity, hardware, software, and program management to identify and remediate security issues.…See more Requires hands-on understanding of both system operations and hardware-software interactions, with ability to communicate technical security solutions to engineering and leadership teams.

This Security Engineer role owns continuous cloud security posture management (CSPM) and vulnerability management across AWS accounts, detecting misconfigurations and driving remediation at scale. The person will build reusable Terraform modules, Service Control Policies, and policy-as-code guardrails to make secure-by-default infrastructure; design least-privilege IAM; govern secrets and encryption; and build cloud-native detections (CloudTrail, GuardDuty, Config, Security Hub) with automated remediation.…See more They'll map technical controls to compliance frameworks (CMMC, NIST SP 800-171, FedRAMP), support the SOC team investigating cloud incidents, and feed findings back into new guardrails. The role requires 3+ years of hands-on cloud security or DevSecOps experience, strong AWS expertise, Terraform and policy-as-code proficiency, and the ability to obtain a U.S. security clearance.

This role designs and implements cybersecurity architecture for complex electromagnetic and power systems across defense, space, and commercial programs. The Cybersecurity Architect develops secure network and system architectures aligned to NIST, DoD, and customer standards; performs vulnerability assessments and risk management; and serves as a technical liaison between security, hardware, software, and program teams.…See more The position requires deep expertise in cyber standards (NIST SP 800-53, NIST SP 800-171, DODI 8500.02, CNSSI 1253), secure system design, and incident response, plus the ability to communicate complex security issues and remediation strategies across all organizational levels.

Security Operations Analyst role monitoring and triaging alerts across endpoint, cloud, identity, network, and SaaS using enterprise SIEM and XDR platforms. Responsibilities include investigating alerts, performing root-cause analysis, tuning detections, owning initial response for mid-tier incidents, participating in on-call rotation, running targeted threat hunts, and contributing to playbooks and post-incident reviews.…See more Requires 2–5 years of hands-on SecOps, SOC, or incident response experience; proficiency with enterprise SIEM query languages, EDR tooling, and scripting in Python/PowerShell/Bash; and solid understanding of MITRE ATT&CK and network fundamentals.

The IT Cybersecurity Specialist will architect and implement ServiceNow security controls aligned with DoD cybersecurity requirements, including Role-Based Access Controls, Data Policies, and Edge Encryption. The role requires developing and maintaining RMF/ATO documentation, mapping configurations to NIST SP 800-53/800-171/172 and DoD IL4/IL5 controls, and managing Plans of Action and Milestones for vulnerability remediation.…See more The candidate will conduct continuous monitoring activities, compliance checks, and security assessments to maintain the Blue List platform's Authority to Operate and ensure alignment with DoD Zero Trust Strategy and CUI protection requirements.

Lead detection operations, incident response, and security operations maturation for a growing security team. Operate SIEM/XDR across endpoint, cloud, identity, network, and SaaS telemetry; conduct complex investigations; tune detections; and drive root-cause analysis and post-incident improvements.…See more Require 6+ years of hands-on security operations, detection engineering, or incident response experience with deep proficiency in SIEM/XDR query languages, EDR platforms, scripting (Python, PowerShell, Bash), and MITRE ATT&CK framework application. Mentor analysts, define playbooks and runbooks, lead threat hunts, and own SecOps metrics and operational-readiness reporting.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.

The Information Systems Security Manager will develop, implement, and maintain the company's information security policies and compliance programs aligned with NIST SP 800-171, DFARS, ISO 27001, and CMMC requirements. Responsibilities include overseeing Controlled Unclassified Information (CUI) and classified information protection, conducting risk assessments and vulnerability analyses, leading incident response efforts, and serving as primary liaison with government agencies on compliance matters.…See more The role requires 7+ years of information security management experience with at least 3 years in a leadership position, and extensive knowledge of defense industry security standards and classified information handling protocols. The ISSM will collaborate with DevSecOps, IT, and engineering teams to integrate security controls across operations and maintain continuous Authority to Operate (cATO) pipelines.

This role leads enterprise IT infrastructure and operations for a defense technology company, overseeing networks, cloud environments, endpoints, identity and access management, and end-user services. The Director will develop IT strategy aligned with DoD customer requirements, advise leadership on cybersecurity risk and IT modernization, and ensure compliance with CMMC, NIST SP 800-171, DFARS, and RMF standards.…See more Responsibilities include managing IT governance, disaster recovery, vendor relationships, budgets, and supporting protection of Controlled Unclassified Information through security assessments and incident response. The role requires leading and mentoring IT and DevOps teams managing infrastructure including cloud environments.