owasp jobs in San Diego

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

Conduct software security assessments, vulnerability testing, penetration testing, and threat analysis on TrellisWare products. Perform static and dynamic analysis, reverse engineering, and incident investigation while ensuring compliance with FIPS 140, NIST STIG, and other regulatory standards.…See more Requires 5+ years industry experience with 3+ years software development and 2+ years vulnerability testing, proficiency in Python/C++/Java, and at least one security certification (Security+, CISSP, OSCP, or SANS/GIAC).

Senior Application Developer responsible for designing, developing, and maintaining web applications for a financial services organization. The role requires 6+ years of IT experience with advanced proficiency in .NET, C#, ASP.NET, MVC, and T-SQL, plus experience building secure web applications and integrating complex third-party systems.…See more Responsibilities include code reviews, technical architecture assessment, unit testing, and support for both internet and intranet platforms, with knowledge of UI/UX design and familiarity with modern development tools and methodologies preferred.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

Senior Full-Stack Web Application Developer responsible for designing, building, and deploying multiple web applications across financial management, asset management, and internal tools. The role encompasses full-stack ownership from database architecture and API development through frontend implementation, with a strong emphasis on security engineering, DevOps, and infrastructure automation.…See more Key responsibilities include establishing CI/CD pipelines, implementing authentication/authorization and encryption standards, conducting vulnerability assessments, and maintaining code quality through testing and code reviews. Required skills include proficiency in JavaScript/TypeScript, modern frontend frameworks (React, Vue, or Svelte), backend experience (Node.js, Python, Go), relational and NoSQL databases, Docker, cloud platforms (AWS, GCP, Azure), and security implementations (OAuth2/OIDC, JWT, MFA, encryption).