risk-assessment jobs in San Diego

As an Architecture Consultant 3, you will design and review solution architectures for data engineering projects on AWS and Databricks, translating business requirements into scalable technical solutions. You'll assess technologies and platforms, develop integration strategies across systems, and resolve complex technical challenges during build and deployment phases.…See more You'll provide architectural guidance to development teams, identify system risks, and contribute insights to proposals and RFPs. The role requires expertise in solution architecture design, client engagement, and mentoring junior team members.

This Systems Integration Engineer II/III role centers on hands-on system validation, verification, and reliability testing for complex life-science instrumentation integrating hardware, software, firmware, optics, lasers, fluidics, and motion control. The engineer will conduct cross-functional troubleshooting, execute structured test protocols, analyze instrument performance data using statistical methods and Python, and document findings to drive design improvements and field support readiness.…See more Key responsibilities include evaluating workflows against real customer use cases, performing root-cause analysis on failure modes, and continuously refining integration documentation and testing practices. The role requires 2–5 years of systems integration or testing experience, proficiency in DOE/FMEA/statistical analysis, and hands-on lab work with prototypes and integrated instruments.

Cloud Security Engineer III responsible for designing, implementing, and maintaining security controls across the company's infrastructure with a focus on AI/ML platforms. The role involves monitoring AI/ML systems for anomalous behavior, identifying and remediating vulnerabilities in ML pipelines, and collaborating with data scientists to implement secure AI/ML solutions.…See more Requires 8+ years of security engineering experience, 3-5 years of AWS cloud security expertise, AWS Security Certification, and foundational knowledge of ML lifecycle and AI/ML security concepts.

Software Engineer II supporting Navy METOC systems, responsible for maintaining and developing fielded software systems, firmware, and engineering development models. Duties include software maintenance, patch deployment automation, security compliance (DISA STIGs, C&A processes), vulnerability management, and system hardening.…See more Requires 3+ years software engineering experience, Navy tactical systems familiarity (preferably CANES), Windows/Linux administration, scripting (PowerShell, Bash, Python), and DoD 8570 IAT Level II or Security+ CE certification.

A Systems Network Engineer II/III role supporting naval and operational network environments, responsible for designing, implementing, and troubleshooting resilient network architectures while ensuring cybersecurity compliance and risk mitigation. The engineer will assess vulnerabilities, document configuration and design changes at line-level detail, coordinate engineering change and cyber authorization processes, and provide both on-site shipboard support and remote technical guidance.…See more The role requires expertise in network architecture, tactical data links, WAN design, cybersecurity policy, and Assessment & Authorization practices, with coordination across cloud, computer engineering, cybersecurity, and operational teams.

Software Engineer II supporting Navy METOC fielded systems, lab assets, and EDMs under a DoD in-service engineering program. Responsibilities include maintaining system software and firmware, developing automation scripts for patch deployments, performing software testing and validation, and assisting with security hardening, STIG compliance, and certification & accreditation (C&A) processes.…See more Requires 3+ years of software engineering experience, hands-on Windows/Linux system administration and scripting, familiarity with DISA STIGs and vulnerability scanning tools, and preferably prior Navy Tactical Systems or CANES environment experience.

Provide security subject matter expertise to systems engineering and program management teams throughout a program lifecycle, from requirements through sustainment. Develop and maintain security documentation including Security Classification Guides and Program Protection Plans, coordinate NSA End Cryptographic Unit (ECU) certifications, and identify security risks and mitigation strategies for communication systems.See more

As a Staff Product Security Engineer at Qualcomm, you will develop and deploy hardware and software security features across the product lifecycle, perform comprehensive security assessments including vulnerability analysis and threat modeling, and conduct security code reviews. You will identify and remediate security risks, respond to product security incidents, and develop training and tools to embed secure development practices.…See more The role requires a strong foundation in programming languages (C, C++, Java, Python, SystemVerilog) and the ability to work independently on complex security engineering challenges with influence over organizational decisions.

Own day-to-day compliance operations for a healthcare AI company, managing frameworks (SOC2 Type II, HIPAA, NIST, ISO), controls, and policies; triage and remediate failing compliance tests; administer Google Workspace and MDM for workforce security; coordinate external audits end to end; and track risk via assessments and remediation planning. This is a hands-on role requiring direct ownership of remediation from detection to closure, not ticket routing—you'll operate with high rigor in a fast-scaling startup while partnering across engineering, product, and leadership.See more

This is a network engineering role focused on designing, implementing, troubleshooting, and sustaining tactical and enterprise network systems with a strong cybersecurity emphasis. The engineer will work with WAN-level architectures, routing, connectivity, and tactical data links while assessing cybersecurity risks across deployed systems and coordinating with cross-functional stakeholders.…See more The role requires deep experience in network architecture, cybersecurity policy, security controls, vulnerability management, and the ability to document and communicate technical risks and network designs to both engineering and operational audiences.

Systems Engineer III will support complex defense systems engineering activities across software, hardware, network, and mission systems. Responsibilities include architecture development, requirements analysis, technical integration, System of Systems coordination, and risk assessment for Navy programs in RDT&E phases.…See more The role requires translating technical information for cross-functional teams (engineering, cybersecurity, operations, program management) and maintaining architecture artifacts, technical documentation, and engineering analysis products.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.

The Information Systems Security Manager will develop, implement, and maintain the company's information security policies and compliance programs aligned with NIST SP 800-171, DFARS, ISO 27001, and CMMC requirements. Responsibilities include overseeing Controlled Unclassified Information (CUI) and classified information protection, conducting risk assessments and vulnerability analyses, leading incident response efforts, and serving as primary liaison with government agencies on compliance matters.…See more The role requires 7+ years of information security management experience with at least 3 years in a leadership position, and extensive knowledge of defense industry security standards and classified information handling protocols. The ISSM will collaborate with DevSecOps, IT, and engineering teams to integrate security controls across operations and maintain continuous Authority to Operate (cATO) pipelines.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

Own end-to-end compliance operations for a healthcare AI company, including managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), driving control remediation to closure, administering Google Workspace and MDM, coordinating external audits, and maintaining audit-readiness. This role requires hands-on management of a compliance platform of record, continuous monitoring of compliance tests, security policy maintenance, evidence collection, and risk tracking—operating with high rigor in a fast-scaling startup without routing issues to others.See more

This role manages a cybersecurity program for clinical medical technology (diagnostic imaging and therapeutic radiation equipment) at a healthcare organization. The manager will lead staff, oversee regulatory compliance, conduct risk assessments and incident response, ensure HIPAA and Joint Commission adherence, and collaborate with clinical teams on technology security and reliability.…See more The position requires 3+ years of management experience, 5+ years in related healthcare technology work, and a bachelor's degree, with responsibility for budget, purchasing, and business operations.

Lyntris seeks a Cyber Security Engineer II to provide Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy software solutions. The role involves designing, implementing, and monitoring cybersecurity and information assurance policies for mission-critical systems; developing system IA documentation (categorization forms, security plans, assessment plans, continuous monitoring plans, risk assessments); and guiding the software development team through security scan review, evaluation, and remediation.…See more The engineer will work with system owners and stakeholders to manage cybersecurity requirements and continuously improve cyber posture. Requires 2–3 years of Department of Navy accreditation experience and working knowledge of NIST standards, RMF, and eMASS.

The HTM Cybersecurity Program Manager leads cybersecurity and clinical technology programs at a healthcare system, managing a team responsible for diagnostic imaging and therapeutic equipment maintenance, regulatory compliance, and incident response. The role requires directing staff performance, managing budgets and procurement, and ensuring HIPAA and Joint Commission compliance while mentoring technical teams.…See more Key responsibilities include risk assessment, cybersecurity strategy implementation, audit readiness, and collaboration with clinical teams to resolve technology issues affecting patient care. The ideal candidate brings 3+ years of management experience, 5+ years in healthcare technology operations, and deep knowledge of healthcare regulatory frameworks.

Senior Software QA Engineer supporting Dexcom's Postmarket Investigations team to assess real-world product performance, investigate software and device issues, and drive continuous improvement. You will collaborate across R&D, Quality, Regulatory Affairs, and Clinical teams to conduct root-cause analyses, perform risk assessments (including hazard analysis, DFMEA, PFMEA), and translate postmarket insights into product enhancements.…See more The role requires deep technical understanding of software architecture, structured problem-solving, statistical analysis, and the ability to communicate findings to both technical and non-technical stakeholders while ensuring regulatory compliance and patient safety.

The Quality Assurance Specialist II independently owns and operates defined Quality Management System processes, serving as a subject matter expert for batch release, NCMR/deviation/CAPA management, and asset control. The role requires judicious decision-making on routine and moderately complex quality and compliance matters, including investigating quality events, driving corrective actions, and supporting regulatory submissions and FDA inspections.…See more The specialist works collaboratively with a QA Associate and Sr. Quality Systems Engineer, leading process improvements and providing escalation support with minimal oversight.

This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation.…See more The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.

The Global Security Senior Manager leads Cubic Corporation's crisis management, business continuity, and emergency preparedness programs while supporting executive protection for the CEO and Executive Leadership Team. The role develops and manages global crisis plans, conducts training and drills, coordinates emergency response, and oversees contract security personnel and secure transportation operations.…See more Key responsibilities include threat analysis, risk assessments, law enforcement coordination, and providing protective services at the Balboa Campus in San Diego. The position requires strong judgment, independent decision-making authority, occasional travel, and the ability to manage multiple stakeholders across facilities, HR, legal, and health/safety functions.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance platforms (SOC2 Type II, HIPAA, NIST, ISO), administering Google Workspace and MDM, driving remediation of failing controls to closure, and coordinating external audits. Monitor compliance tests continuously, maintain security policies and evidence collection, and work cross-functionally with engineering and leadership to keep the company audit-ready at scale.…See more The role requires hands-on compliance platform administration (Vanta, Drata, or similar), not purely administrative ticket routing.