penetration-testing jobs in San Diego

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing vulnerability and compliance assessments using industry-standard tools like eMASS and ACAS. You'll troubleshoot complex security challenges, assess network and system threats, implement infrastructure controls, and communicate security risks to both technical and non-technical audiences.…See more The role requires 3+ years of experience leading Risk Management Framework (RMF) activities for DoD projects, vulnerability scanning, and security control implementation. You'll work closely with Navy missions to identify cyber risks, recommend solutions, and provide hands-on support using your knowledge of cybersecurity policy, networks, system infrastructure, and risk management.

Senior embedded software engineer role developing mission-critical firmware for Amazon's Leo satellite constellation. Responsibilities include architecting ASIC firmware, RF communication subsystems, secure boot operations, real-time embedded software, and hardware interfaces using protocols like I2C, SPI, UART, and Ethernet.…See more The role requires security-by-design principles, threat modeling, secure coding practices, and collaboration with hardware architects and systems engineers to bring custom silicon from concept through secure bring-up and production integration.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military systems, performing vulnerability assessments, risk analysis, and security compliance testing across networks, systems, and applications. You'll work with DoD Risk Management Framework (RMF) processes, manage security assessment and authorization activities, and use tools like eMASS, ACAS, and STIG scanning to identify threats and implement infrastructure controls.…See more The role requires 4+ years of IT experience with a DoD or government agency, 4+ years leading Navy RMF activities, and 3+ years implementing security controls and performing vulnerability remediation. You'll communicate security complexities to technical and non-technical audiences while supporting critical Navy mission areas.