As a Research Cybersecurity Analyst, you will review research contracts, proposals, and data-use agreements to identify security and compliance requirements, then conduct risk assessments and recommend practical safeguards. You will coordinate security controls across cloud and on-premises research environments, assess architectures for identity management, encryption, and network segmentation, and develop compliance documentation (SSPs, POA&Ms) for sponsor audits and CMMC readiness.… You will work with researchers, IT teams, and compliance partners to interpret regulatory requirements, map them to controls, and explain technical security obligations in practical terms to non-technical stakeholders. Experience in NIST frameworks, security assessments, vulnerability management, and regulated environments (higher education, research, healthcare, government, defense) is especially valued.
security-assessments jobs in San Diego
The Field Office Information Systems Security Manager develops and implements security protocols for information systems at a Georgia Tech field office, with dual responsibilities as Assistant Facility Security Officer (AFSO) or Assistant Contractor Special Security Officer (ACSSO). The role involves monitoring system performance through regular security audits and assessments, providing expert guidance on security best practices, and ensuring compliance with government regulations including NISPOM, DoD directives, NSA/CSS policies, and Intelligence Community standards.… The position requires expertise in classified information handling, security protocols, and government security compliance frameworks.
Cybersecurity Engineer responsible for comprehensive vulnerability management, security assessments, and risk mitigation across systems, networks, and data. Conducts STIG compliance checks, system security testing in lab and field environments, and collaborates with engineering teams on remediation prioritization and Risk Management Framework (RMF) documentation.… Requires Security+ certification, bachelor's degree in computer science or cybersecurity, or equivalent experience.
The Security Specialist will manage and administer a comprehensive Sensitive Compartmented Information (SCI) security program for SCIF operations, including policy interpretation, on-site compliance inspections, and security education. The role requires advising leadership on security practices, analyzing workforce security needs, coordinating Navy SCI contracts validation, and ensuring DoD standards are met.… The position demands a Top Secret/SCI clearance, periodic polygraph examination, and Security Fundamentals Professional Certification (SFPC) within two years.
The Information Security Analyst II will protect both operational technology (OT) and information technology (IT) environments at a pharmaceutical manufacturer. Responsibilities include securing industrial control systems, SCADA platforms, PLC-based automation, manufacturing execution systems, and enterprise endpoints; managing OT asset inventory and vulnerability remediation; implementing security controls and hardening standards; and supporting threat detection, incident response, and security assessments.… The role requires 3+ years in information security or system administration with direct OT/ICS/SCADA/manufacturing experience, working knowledge of Purdue Enterprise Reference Architecture and relevant standards (ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0), and hands-on experience with endpoint security, vulnerability management, and Windows/Active Directory administration.
The Information System Security Officer (ISSO) serves as a steward of classified and high-side information systems, ensuring security compliance and operational resilience in accordance with DoD and DCSA standards. The role involves executing Risk Management Framework (RMF) activities, pursuing Authorization to Operate (ATO) via eMASS, conducting vulnerability scanning with tools like Nessus, and maintaining compliance with NISP and federal requirements.… Responsibilities include hands-on system administration, security monitoring, patch management, data transfer operations, and collaborative work with industrial security teams to integrate technical and administrative controls. Success requires proven experience processing ATO packages, system administration skills, security compliance knowledge, and the ability to balance rigorous security controls with operational effectiveness.