owasp-top-10 jobs in San Diego

Lead OutSystems engineer responsible for designing, building, and delivering enterprise low-code applications in a banking environment. Provide technical leadership through code reviews, mentoring developers through OutSystems certifications, and acting as the platform SME for architectural decisions.…See more Manage application deployments via LifeTime and ODC Portal, collaborate with DevOps teams on CI/CD integration, and proactively resolve performance and security issues. Extend OutSystems with full-stack capabilities in .NET/C#, SQL, REST/SOAP integrations, and front-end frameworks while maintaining regulatory compliance.

Design, build, and maintain backend services and APIs in C# / .NET (ASP.NET Core, Web API, Entity Framework) for production airport workloads, with a focus on ERP and billing systems requiring high accuracy and auditability. Modernize legacy .NET Framework applications to modern .NET and Azure, optimize SQL Server and Azure SQL data access, and build cloud-native solutions using App Services, Azure Storage, Key Vault, and managed identities.…See more Write secure, well-tested code instrumented with Application Insights; troubleshoot production issues across application, database, and hosting layers; and partner with product and DevOps to deliver supportable software.

Join an offensive security team to triage and analyze vulnerabilities from bug bounties, penetration tests, and responsible AI security programs. You'll assess severity, write detailed security reports, collaborate with product and security teams on remediation, and support penetration testing across web apps, APIs, mobile, desktop applications, and LLMs.…See more The role requires 3+ years in computer security with at least 2 years of offensive security experience, hands-on penetration testing and vulnerability scanning skills, deep knowledge of OWASP Top 10, and proficiency in Python or similar scripting languages.

This role combines offensive security expertise with vulnerability management for a financial software company. The engineer will triage and analyze bug bounty and vulnerability disclosure reports, reproduce vulnerabilities, develop technical findings, and communicate security risks to product and engineering teams.…See more The position requires 3+ years of cybersecurity experience with 2+ years in offensive security, hands-on penetration testing and vulnerability scanning skills, experience testing web/mobile/desktop applications or AI systems, and proficiency in Python or similar scripting languages.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

This is a hands-on product security role focused on threat modeling and cybersecurity risk management for medical devices and SaMD platforms. You'll conduct security risk assessments, build FDA submission documentation (510(k) files, risk management files, SBOMs), review security architecture, and maintain risk and vulnerability management plans.…See more The role requires 5+ years of cybersecurity or product security experience, with strong preference for FDA documentation and regulated medical device background, and working knowledge of NIST frameworks, OWASP, and secure SDLC practices.