sbom jobs in San Diego

Design and develop security strategies for Abbott's cloud-based medical devices and applications, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Conduct web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools. Leverage AI-assisted development and cybersecurity tools—including building agentic AI applications—to automate security deliverables, with responsibility for evaluating AI tools for safe, policy-compliant use and mitigating AI/LLM-specific risks.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

Senior DevOps Build Engineer responsible for designing, building, and maintaining CI/CD pipelines that compile, test, package, and publish software across defense and government contract programs. The role owns build automation, release engineering, artifact management, and container registries end-to-end, while integrating security and compliance checks directly into the build process.…See more Requires 8+ years of hands-on experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins), strong scripting skills in Python and Bash, and proficiency with containerization, artifact management, and cloud platforms (AWS or Azure). The engineer will partner with development, security, and compliance teams to deliver self-service tooling and standardize builds across unclassified and controlled unclassified environments.

Senior DevOps Build Engineer responsible for designing and maintaining CI/CD pipelines, build automation, and artifact management systems across defense and government contract programs. The role owns end-to-end build and release engineering, standardizing compilation, packaging, versioning, and promotion across unclassified and controlled environments while integrating security and compliance checks into the build process.…See more Key responsibilities include pipeline design (GitLab CI, GitHub Actions, Jenkins), artifact repository management, build tooling development (Bash, Python, Bazel, Gradle), container image management, and infrastructure provisioning using Terraform. The position requires 8+ years of build/release engineering or DevOps experience, strong scripting skills, and U.S. citizenship with the ability to obtain a security clearance.

This Staff Platform Engineer role owns operational strategy and technical direction for enterprise GitLab (3,000+ users) and JFrog Artifactory platforms, leading cloud-native transformation and Kubernetes migrations. The position requires 7+ years of enterprise-scale platform operations, 5+ years each with self-managed GitLab and Artifactory in high-availability deployments, and 3+ years of deep Kubernetes expertise.…See more Responsibilities include designing multi-region active-active systems, establishing cloud-native best practices, mentoring team members, and influencing organizational standards for platform engineering and developer experience. Required expertise spans Linux kernel/networking, PostgreSQL high availability, AWS/Azure/GCP, Kubernetes operators, service mesh (Istio), infrastructure-as-code (Terraform), observability (Prometheus), and production automation in Python, Go, and Bash.