sca jobs in San Diego

Senior Application Security Engineer responsible for building and tuning Turquoise's application security scanning program (SAST, DAST, SCA, container, IaC scanning) and triaging findings from scans, penetration tests, and bug bounties. Day-to-day work includes partnering with engineering teams to remediate vulnerabilities, performing threat modeling, maintaining secure-coding standards, and supporting incident response for application-layer issues.…See more Requires 5+ years in application security or software engineering with security focus, deep hands-on experience with scanning tools, strong understanding of OWASP Top 10 and common vulnerability classes, and experience securing cloud environments and CI/CD pipelines.

This is a hands-on DevSecOps engineering role focused on designing and maintaining secure CI/CD pipelines, software supply-chain controls, and Kubernetes deployment standards. The engineer will work across Azure DevOps, Nexus, SonarQube, and container orchestration to integrate security and quality checks into build and release workflows, support platform engineering teams, and enable developers with documentation and automation.…See more Responsibilities include implementing SAST, SCA, dependency scanning, secrets management, artifact controls, and compliance alignments (NIST, CMMC, RMF, Zero Trust); troubleshooting pipeline and deployment failures; and creating runbooks and guardrails. The role requires 5+ years in DevOps/DevSecOps, hands-on Azure DevOps and Kubernetes experience, scripting proficiency, and an active Secret Clearance with eligibility for TS/SCI.

Design, develop, and deliver software capabilities across the full delivery pipeline—from design through automated testing to production deployment—for secure, mission-critical DoD systems. Code in Python, Java, C#, Go, or C++; implement modern architectural patterns (Microservices, Event-Driven, Serverless); and apply DevSecOps principles with automated security testing (SAST, DAST, SCA, container scanners) as CI/CD quality gates.…See more Requires 5+ years of Agile software development, 2+ years of DevSecOps in regulated government/DoD environments, and 2+ years working with resilient architectures in DDIL and afloat/ashore PaaS environments including Cross-Domain Solutions integration.

Design, develop, and deliver software capabilities across the full delivery pipeline—from design through automated testing to production deployment—for secure, mission-critical DoD systems. Code in Python, Java, C#, Go, or C++, implement modern architectural patterns (Microservices, Event-Driven, Serverless), and manage Git-based workflows.…See more Participate in end-to-end delivery using Agile frameworks (Scrum, Kanban, SAFe) to Kubernetes, cloud, or virtualized environments. Apply DevSecOps principles, configuring automated security testing tools (SAST, DAST, SCA, container scanners) as CI/CD quality gates in regulated government/DoD environments, and maintain resilient architectures for DDIL and PaaS platforms with Cross-Domain Solutions integration.

Lead full-lifecycle software development for containerized, VM, and cloud architectures across multiple security domains (Unclassified through Top Secret). Apply DevSecOps principles by configuring automated security testing tools (SAST/DAST/SCA, container scanners) as CI/CD quality gates in highly regulated DoD environments.…See more Engineer and troubleshoot interoperable systems for critical defense platforms operating in DDIL (Denied, Disrupted, Intermittent, Limited-bandwidth) environments, including Navy Agile Core Services and USMC Common Hosting Environment. Requires 7+ years in full-lifecycle development, 4+ years in DevSecOps with government-mandated pipelines, and 3+ years integrating systems for defense platforms.

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

Secure the application development lifecycle and software supply chain as a Security Engineer, embedding with engineering teams to design and implement threat modeling, secure code review, SAST/DAST/SCA integration into CI/CD pipelines, and secrets management. Own dependency and supply-chain security including SCA, SBOMs, and artifact signing, while designing hardened infrastructure patterns for self-hosted applications across AWS, Azure, and on-premises.…See more Build durable tooling through scripting and Infrastructure-as-Code to scale security across the organization, making secure deployment and controls the default rather than exceptions.

Software Developer III will design, develop, test, integrate, and deploy software for the Application Arsenal platform, translating user stories and operational requirements into secure, maintainable solutions. The role requires hands-on coding in languages like Python, Java, C#, Go, or C++; implementing modern architectural patterns (microservices, event-driven, serverless); and managing the complete software delivery lifecycle including CI/CD pipelines, automated security testing (SAST, DAST, SCA), and containerization.…See more The developer will support Kubernetes and cloud deployments, troubleshoot issues across laboratory and operational environments, and collaborate with systems engineers, cybersecurity teams, and government stakeholders. An active Top Secret or TS/SCI clearance with Tier 5 investigation, Security+ certification, and minimum 5 years of Agile software development experience are required.

A Systems Engineer III will design, implement, and maintain secure software delivery pipelines across multiple classification domains for Naval Information Warfare Center Pacific's Application Arsenal platform. The role requires deep expertise in DevSecOps automation, containerized and cloud-based architectures, and integration of security testing tools (SAST, DAST, SCA, container scanners) as CI/CD quality gates.…See more The engineer will troubleshoot interoperable systems in denied/disrupted/limited-bandwidth environments, support PaaS deployments, and ensure compliance with DoD cybersecurity requirements while collaborating with cross-functional Agile teams.

Entarian seeks a DevSecOps Engineer to design and maintain a DevOps Platform supporting the U.S. Navy's software development and systems integration.…See more The role involves developing GitLab CI/CD pipelines, building Infrastructure-as-Code with Terraform on AWS and similar cloud platforms, automating Kubernetes configurations, and implementing security controls per DoD and NIST standards. Responsibilities include hardening base images, validating Information Assurance Controls, documenting processes, and collaborating across Agile teams to deliver secure, cloud-native infrastructure.

Senior DevSecOps Engineer supporting full-lifecycle software development across containerized, virtual-machine, and cloud-based architectures within DoD environments spanning Unclassified through Top Secret security domains. Configure and integrate automated security testing tools (SAST, DAST, SCA, container scanning) as CI/CD quality gates within highly regulated Government pipelines.…See more Engineer and troubleshoot interoperable software systems for critical defense platforms operating in DDIL, afloat, and ashore PaaS environments, including Navy ACS and USMC CHE architectures.

Software Developer III responsible for designing, developing, and delivering software capabilities in production environments using Agile frameworks. The role requires 5+ years of software development experience with proficiency in at least one modern programming language (Python, Java, C#, Go, C++) and modern architectural patterns (Microservices, Event-Driven, Serverless).…See more Must have 2+ years applying DevSecOps principles with automated security testing tools (SAST, DAST, SCA, container scanners) in CI/CD pipelines within regulated government/DoD environments, and 2+ years building resilient software architectures for DDIL and Navy PaaS environments. Responsibilities include software installation, version control, build processes, automated testing, systems modeling, and technical infrastructure support.

Design, implement, and maintain secure software delivery pipelines for the Department of the Navy's Application Arsenal, supporting containerized platforms (ACS, CHE, OPE) and autonomous systems across multiple classification domains. Engineer full lifecycle CI/CD automation with DevSecOps practices, integrating automated security testing (SAST, DAST, SCA, container scanners) as quality gates.…See more Troubleshoot interoperable software systems in denied/disrupted/bandwidth-limited (DDIL) environments and support PaaS deployment across afloat and ashore platforms. Collaborate with cross-functional teams using Agile methodologies while ensuring DoD cybersecurity compliance.

Principal or Sr. Principal embedded software engineer responsible for developing, integrating, and debugging low-level firmware and real-time multi-threaded embedded applications for Link 16 tactical datalink systems.…See more The role requires proficiency in C/C++, object-oriented programming, and the full software lifecycle from requirements to testing, with hands-on experience troubleshooting Link 16 waveforms, working with tactical datalink radios/terminals, and collaborating across systems engineering, hardware, and integration teams in an Agile environment. Candidates must be able to obtain a U.S. Secret-level security clearance and work full-time onsite.

This is a high-ownership QA role at an early-stage AI validation startup where you'll design and build testing strategy, test infrastructure, and quality processes from the ground up. You'll perform manual and automated testing of CLI tools, web dashboards, and integrations with AI coding assistants (Claude, Cursor, GitHub Copilot, etc.), validate scan accuracy, and own bug triage across multiple operating systems and language ecosystems.…See more You'll work directly with founders and engineering to build testability into the product and define QA processes as the team scales, with responsibilities spanning test case design, automated regression/integration/end-to-end testing, and release sign-off.

Join Gadriel AI as an AI Developer to design, build, and ship features across their AI code validation platform end-to-end. You'll work primarily with modern AI coding assistants (Claude, Cursor, Windsurf) as your development environment, build integrations with AI tools and CLIs, contribute to backend services and validation logic, and participate in architecture decisions at an early-stage startup.…See more The role requires strong full-stack engineering fundamentals across TypeScript/JavaScript and Python, real hands-on experience with AI coding assistants, CLI and developer tooling experience, and familiarity with security concepts like SAST and SCA. You'll move fast, iterate on user feedback, and help shape product direction in a high-autonomy, founder-led environment.

Design and implement security strategies for Abbott's cloud-based applications and medical devices, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Leverage AI-assisted development tools and cybersecurity platforms to automate vulnerability analysis, evidence collection, and remediation tracking. Conduct hands-on web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools, with demonstrated experience in product security and medical device environments preferred.

Design and develop security strategies for Abbott's cloud-based medical devices and applications, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Conduct web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools. Leverage AI-assisted development and cybersecurity tools—including building agentic AI applications—to automate security deliverables, with responsibility for evaluating AI tools for safe, policy-compliant use and mitigating AI/LLM-specific risks.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).…See more The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

Senior DevOps Build Engineer responsible for designing, building, and maintaining CI/CD pipelines that compile, test, package, and publish software across defense and government contract programs. The role owns build automation, release engineering, artifact management, and container registries end-to-end, while integrating security and compliance checks directly into the build process.…See more Requires 8+ years of hands-on experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins), strong scripting skills in Python and Bash, and proficiency with containerization, artifact management, and cloud platforms (AWS or Azure). The engineer will partner with development, security, and compliance teams to deliver self-service tooling and standardize builds across unclassified and controlled unclassified environments.

Senior DevOps Build Engineer responsible for designing and maintaining CI/CD pipelines, build automation, and artifact management systems across defense and government contract programs. The role owns end-to-end build and release engineering, standardizing compilation, packaging, versioning, and promotion across unclassified and controlled environments while integrating security and compliance checks into the build process.…See more Key responsibilities include pipeline design (GitLab CI, GitHub Actions, Jenkins), artifact repository management, build tooling development (Bash, Python, Bazel, Gradle), container image management, and infrastructure provisioning using Terraform. The position requires 8+ years of build/release engineering or DevOps experience, strong scripting skills, and U.S. citizenship with the ability to obtain a security clearance.