nist jobs in San Diego

The Manager of Digital Transformation will lead engineering teams through AI and automation initiatives at a defense shipbuilder, identifying practical use cases and coordinating proofs-of-concept for secure, compliant automation. The role requires 7+ years in engineering or technical environments with 3+ years of team leadership, plus strong change-management capabilities to guide stakeholders through organizational and technological transitions.…See more The manager will translate engineering needs into scalable solutions, manage platform stewardship, compliance frameworks (FedRAMP, ITAR/EAR, CMMC/NIST), and enterprise platform procurement. Success demands technical knowledge of engineering workflows, data governance, multi-system integration, and emerging AI/automation technologies, paired with exceptional communication and conflict-resolution skills.

The Cybersecurity Analyst owns Bumble Bee's day-to-day security operations, investigating and responding to incidents, hunting threats, and tuning detection tooling to close coverage gaps. Responsibilities include managing the full incident response lifecycle, optimizing SIEM platforms, conducting vulnerability assessments, performing access control audits, and building incident response playbooks and procedures.…See more The role requires 4+ years of cybersecurity experience, proficiency with SIEM platforms, EDR tools, vulnerability management platforms, and hands-on knowledge of Windows/Linux, networking, and the MITRE ATT&CK framework. Success demands both technical operations expertise and cross-functional collaboration to strengthen security posture, ensure compliance, and assess third-party cyber risk.

Conduct software security assessments, vulnerability testing, penetration testing, and threat analysis on TrellisWare products. Perform static and dynamic analysis, reverse engineering, and incident investigation while ensuring compliance with FIPS 140, NIST STIG, and other regulatory standards.…See more Requires 5+ years industry experience with 3+ years software development and 2+ years vulnerability testing, proficiency in Python/C++/Java, and at least one security certification (Security+, CISSP, OSCP, or SANS/GIAC).

Senior Systems Engineer responsible for designing, implementing, securing, and optimizing enterprise Microsoft 365 and Azure environments for government and commercial clients. You will architect and deploy M365 services (Exchange Online, SharePoint, Teams, Intune, Entra ID) and Azure infrastructure (VMs, networking, storage, AVD, monitoring), lead cloud migrations and hybrid identity configurations, and develop security baselines and Zero Trust policies.…See more The role requires advanced PowerShell scripting, Infrastructure-as-Code practices, troubleshooting complex identity and cloud issues, and mentoring junior engineers while collaborating with security teams and stakeholders.

Own day-to-day compliance operations for a healthcare AI company, managing frameworks (SOC2 Type II, HIPAA, NIST, ISO), controls, and policies; triage and remediate failing compliance tests; administer Google Workspace and MDM for workforce security; coordinate external audits end to end; and track risk via assessments and remediation planning. This is a hands-on role requiring direct ownership of remediation from detection to closure, not ticket routing—you'll operate with high rigor in a fast-scaling startup while partnering across engineering, product, and leadership.See more

This Cybersecurity Manager role owns vulnerability and exposure management, leads penetration testing, threat hunting, and threat intelligence programs. The position integrates AI and machine learning into security operations to enhance threat detection and anomaly identification, manages security tools and incident response, and ensures the security of AI/ML systems across the enterprise.…See more The candidate will develop automation scripts and SOAR workflows, conduct forensic investigations, and drive continuous improvement in the security posture. Required qualifications include 5+ years of cybersecurity experience, a relevant bachelor's degree, and an industry-recognized certification (Security+, SSCP, CCNP Security, CISSP, or equivalent).

This DevOps Engineer role bridges software developers and systems administration teams at a fusion research facility, managing high-availability virtualization clusters, infrastructure-as-code automation, and CI/CD pipelines. Key responsibilities include Proxmox VE cluster management, Ansible-based infrastructure templating, patch lifecycle automation via Red Hat Satellite/Foreman, Docker containerization, and rapid-response security deployments to meet DOE compliance SLAs.…See more The position requires deep expertise in Linux system administration, configuration management, CI/CD tools, scripting (Bash, Python, JavaScript), and experience operating in regulated federal/research environments under NIST and DOE cybersecurity frameworks.

Director-level role leading cyber architecture strategy and teams at an enterprise consulting firm. Responsibilities include architecting secure cloud and AI-enabled solutions, guiding security controls and design patterns, mentoring security professionals, and providing technical thought leadership on emerging technologies like generative AI and agentic systems.…See more Requires 10+ years of security architecture experience, expertise across IaaS/PaaS/SaaS platforms, and proven ability to influence enterprise technology strategy while balancing business enablement with risk management.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

Serve as a primary administrator for core security technologies including Microsoft Defender Suite, Entra ID, Conditional Access, and endpoint protection, while also administering enterprise infrastructure across Microsoft 365, Azure, AWS, VMware, and hybrid platforms. Troubleshoot complex infrastructure and security issues, manage cloud backup and disaster recovery, monitor alerts through LogicMonitor and SIEM/MDR/SOCaaS services, and coordinate with security operations teams on investigations and remediation.…See more Requires 8+ years of hands-on experience in cybersecurity and infrastructure engineering in business-critical environments, with deep expertise in Microsoft identity and security technologies, cloud platforms, vulnerability management, and enterprise backup solutions. Participate in after-hours support and escalation activities as needed.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), driving control remediation to closure, administering Google Workspace and MDM, coordinating external audits, and maintaining audit-readiness. This role requires hands-on management of a compliance platform of record, continuous monitoring of compliance tests, security policy maintenance, evidence collection, and risk tracking—operating with high rigor in a fast-scaling startup without routing issues to others.See more

Lyntris seeks a Cyber Security Engineer II to provide Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy software solutions. The role involves designing, implementing, and monitoring cybersecurity and information assurance policies for mission-critical systems; developing system IA documentation (categorization forms, security plans, assessment plans, continuous monitoring plans, risk assessments); and guiding the software development team through security scan review, evaluation, and remediation.…See more The engineer will work with system owners and stakeholders to manage cybersecurity requirements and continuously improve cyber posture. Requires 2–3 years of Department of Navy accreditation experience and working knowledge of NIST standards, RMF, and eMASS.

Design, implement, and maintain secure DevSecOps automation frameworks across on-premise and cloud infrastructure, integrating security controls into CI/CD pipelines for application and configuration deployment. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, Python, and Bash across Windows, Linux, VMware, Azure, and hybrid environments.…See more Automate provisioning, patching, vulnerability remediation, and compliance checks aligned with FFIEC, NCUA, CIS, and NIST standards while partnering with Cybersecurity, Infrastructure, and Application Development teams. Support container/platform engineering, cloud identity governance, and promote DevSecOps and GitOps practices across technology teams.

This Staff IT Engineer role supports secure enterprise environments serving government missions, with primary responsibility for implementing, administering, and optimizing Microsoft infrastructure technologies including Windows Server, Active Directory, Group Policy, SCCM, DNS, DHCP, file services, and print services. The candidate will provide Tier 2/3 support, troubleshoot complex infrastructure issues, perform system maintenance and patching, manage endpoint compliance, and ensure compliance with federal cybersecurity frameworks (NIST, RMF, CMMC).…See more The role requires at least 3 years of hands-on experience with on-premises Microsoft infrastructure in enterprise environments and an active Top Secret security clearance.

Design, implement, and maintain secure DevSecOps automation frameworks and CI/CD pipelines across hybrid infrastructure, cloud, and application platforms. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, and Python to automate provisioning, configuration management, patching, and vulnerability remediation across Windows, Linux, VMware, and Azure environments.…See more Integrate security controls into deployment pipelines including vulnerability scanning, secrets detection, code scanning, and policy enforcement aligned with FFIEC, NCUA, CIS, and NIST standards. Partner across Infrastructure, Security, and Application Development teams to advance DevSecOps practices, container engineering, and secure cloud governance.

This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation.…See more The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance platforms (SOC2 Type II, HIPAA, NIST, ISO), administering Google Workspace and MDM, driving remediation of failing controls to closure, and coordinating external audits. Monitor compliance tests continuously, maintain security policies and evidence collection, and work cross-functionally with engineering and leadership to keep the company audit-ready at scale.…See more The role requires hands-on compliance platform administration (Vanta, Drata, or similar), not purely administrative ticket routing.