security-auditing jobs in San Diego

Cybersecurity Engineer I supporting Assessment & Authorization accreditation efforts under the NIWC PAC contract. Responsibilities include maintaining cybersecurity monitoring operations, conducting vulnerability assessments, performing incident triage, developing A&A documentation (SSP, SAP, SAR), managing POA&Ms, and adhering to Risk Management Framework and eMASS scheduled tasking cycles including STIG checks and ATO/ATC processes.…See more Requires a Bachelor's degree in Cybersecurity, IT, or related field, 1+ years of relevant experience, and IAT II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).

Implement, assess, and authorize security controls for IT management systems under the Risk Management Framework (RMF). Conduct security reconnaissance, identify gaps, develop Plans of Action and Milestones (POA&Ms), and maintain A&A documentation (SSPs, SAPs, SARs).…See more Manage eMASS compliance, STIG assessments, and coordinate accreditation workflows. Requires 10+ years of cybersecurity experience, an active Secret clearance, IAT Level III certification (CISSP preferred), and hands-on A&A and ATO submission experience.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, including maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SARs), and managing eMASS tasking throughout the accreditation cycle.…See more The role requires in-depth knowledge of the Risk Management Framework, DISA circuit connections, and cloud service provider inheritance. This position requires a Secret clearance, IAT Level III certification, and one of several advanced certifications (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), plus 10+ years of cybersecurity or incident response experience.