oscp jobs in San Diego

Lead high-severity incident investigations, mentor L1/L2 analysts, and drive detection engineering at a cybersecurity services firm. Responsibilities include threat hunting, malware analysis, digital/network forensics, SIEM/EDR tuning (KQL, SPL, Sigma, YARA), playbook development, and automation scripting in Python/PowerShell/Bash.…See more This is a 5+ year senior incident responder role requiring deep hands-on expertise across the full incident response lifecycle, MITRE ATT&CK, and client-facing technical briefings.

Senior Application Security Engineer responsible for building and tuning Turquoise's application security scanning program (SAST, DAST, SCA, container, IaC scanning) and triaging findings from scans, penetration tests, and bug bounties. Day-to-day work includes partnering with engineering teams to remediate vulnerabilities, performing threat modeling, maintaining secure-coding standards, and supporting incident response for application-layer issues.…See more Requires 5+ years in application security or software engineering with security focus, deep hands-on experience with scanning tools, strong understanding of OWASP Top 10 and common vulnerability classes, and experience securing cloud environments and CI/CD pipelines.

Senior Principal Cybersecurity Engineer supporting DoD Navy communication systems, responsible for planning and executing penetration tests, performing network traffic analysis, architecting hardened IT systems in classified environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards. Requires 14+ years of experience (or 12+ with master's degree), with 5–7 years in hands-on cybersecurity engineering and 5+ years designing/implementing hardened systems in classified settings.…See more Must hold an active Top Secret clearance and be able to obtain TS/SCI.

Principal Cyber Architect supporting DoD systems engineering teams on Assessment and Authorization (A&A) activities, cyber design and implementation, and DevSecOps integration. Responsibilities include conducting vulnerability assessments, analyzing static/dynamic code scans, developing system security plans, and ensuring compliance with RMF controls and DISA STIGs.…See more Requires Bachelor's in Cyber/Systems/Software/Electrical Engineering plus 6+ years of experience and one DoDM 8140 compliant certification (CCSP, CISSP-ISSEP/ISSAP, CSSLP, or Cloud+). Experience with MBSE, Cameo, Zero Trust Architecture, threat modeling, and offensive security analysis preferred.

Join an offensive security team to triage and analyze vulnerabilities from bug bounties, penetration tests, and responsible AI security programs. You'll assess severity, write detailed security reports, collaborate with product and security teams on remediation, and support penetration testing across web apps, APIs, mobile, desktop applications, and LLMs.…See more The role requires 3+ years in computer security with at least 2 years of offensive security experience, hands-on penetration testing and vulnerability scanning skills, deep knowledge of OWASP Top 10, and proficiency in Python or similar scripting languages.

SAIC seeks a Principal Cybersecurity Engineer to perform penetration testing, vulnerability assessments, and security architecture work on classified Navy communication systems. The role requires hands-on expertise in network traffic analysis (Wireshark), hardened IT systems design, DoD/IC security frameworks (NIST RMF, DISA STIG), and offensive security techniques against DoD/IC infrastructure.…See more Candidates must have 9+ years total experience (5–7 years in cybersecurity engineering, 5+ in classified/high-security environments), proven red-team capabilities, and an active Top Secret clearance with ability to obtain TS/SCI.

Conduct software security assessments, vulnerability testing, penetration testing, and threat analysis on TrellisWare products. Perform static and dynamic analysis, reverse engineering, and incident investigation while ensuring compliance with FIPS 140, NIST STIG, and other regulatory standards.…See more Requires 5+ years industry experience with 3+ years software development and 2+ years vulnerability testing, proficiency in Python/C++/Java, and at least one security certification (Security+, CISSP, OSCP, or SANS/GIAC).

Security Operations Analyst role monitoring and triaging alerts across endpoint, cloud, identity, network, and SaaS using enterprise SIEM and XDR platforms. Responsibilities include investigating alerts, performing root-cause analysis, tuning detections, owning initial response for mid-tier incidents, participating in on-call rotation, running targeted threat hunts, and contributing to playbooks and post-incident reviews.…See more Requires 2–5 years of hands-on SecOps, SOC, or incident response experience; proficiency with enterprise SIEM query languages, EDR tooling, and scripting in Python/PowerShell/Bash; and solid understanding of MITRE ATT&CK and network fundamentals.

Lead detection operations, incident response, and security operations maturation for a growing security team. Operate SIEM/XDR across endpoint, cloud, identity, network, and SaaS telemetry; conduct complex investigations; tune detections; and drive root-cause analysis and post-incident improvements.…See more Require 6+ years of hands-on security operations, detection engineering, or incident response experience with deep proficiency in SIEM/XDR query languages, EDR platforms, scripting (Python, PowerShell, Bash), and MITRE ATT&CK framework application. Mentor analysts, define playbooks and runbooks, lead threat hunts, and own SecOps metrics and operational-readiness reporting.

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).