The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, and identifying vulnerabilities with remediation recommendations. The role requires deep knowledge of the Risk Management Framework and involves testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation including System Security Plans, Security Assessment Plans, and Security Assessment Reports.… Responsibilities include managing eMASS scheduled tasking, quarterly STIG checks, annual security reviews, and maintaining DISA circuit connections and system inheritance workflows. The candidate must hold or obtain a Secret clearance and possess one of several IAM Level II certifications (CASP+, CAP, CISM, CISSP, or GSLC) with 10+ years of cybersecurity or incident response experience.
security-monitoring jobs in San Diego
The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. The role requires deep expertise in the Risk Management Framework, including designing and tailoring security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing comprehensive A&A documentation (SSP, SAP, SARs).… Responsibilities include adherence to eMASS scheduled tasking, quarterly IV&V and STIG checks, annual security reviews, monthly POA&M updates, and managing DISA circuit connections and inheritance workflows. The position requires 10+ years of cybersecurity or incident-response experience and one of several security certifications (CASP+, CAP, CISM, CISSP, or GSLC).
Cybersecurity Engineer I supporting Assessment & Authorization accreditation efforts under the NIWC PAC contract. Responsibilities include maintaining cybersecurity monitoring operations, conducting vulnerability assessments, performing incident triage, developing A&A documentation (SSP, SAP, SAR), managing POA&Ms, and adhering to Risk Management Framework and eMASS scheduled tasking cycles including STIG checks and ATO/ATC processes.… Requires a Bachelor's degree in Cybersecurity, IT, or related field, 1+ years of relevant experience, and IAT II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).
The Senior Security AI Risk Analyst will assess and secure AI-enabled systems at Sony Interactive Entertainment, identifying material security risks, control gaps, and data classification issues. The role requires translating findings into actionable recommendations, partnering with Responsible AI & Governance and security teams, and maintaining a portfolio view of emerging AI security trends.… Candidates must have 6+ years securing technical systems with recent hands-on generative AI experience, strong knowledge of modern AI stacks, and the ability to interrogate designs, trace data flows, and identify security weaknesses in LLM and agentic systems. The position demands both deep security fundamentals (identity, permissions, data protection, monitoring) and a practical builder mindset to use tooling, APIs, and automation to explore and improve systems.
The Information Security Analyst II will protect both operational technology (OT) and information technology (IT) environments at a pharmaceutical manufacturer. Responsibilities include securing industrial control systems, SCADA platforms, PLC-based automation, manufacturing execution systems, and enterprise endpoints; managing OT asset inventory and vulnerability remediation; implementing security controls and hardening standards; and supporting threat detection, incident response, and security assessments.… The role requires 3+ years in information security or system administration with direct OT/ICS/SCADA/manufacturing experience, working knowledge of Purdue Enterprise Reference Architecture and relevant standards (ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0), and hands-on experience with endpoint security, vulnerability management, and Windows/Active Directory administration.
Sr. Software Product Security role focused on monitoring, assessing, and responding to product and application security risks, vulnerabilities, and emerging cybersecurity threats.… Responsibilities include conducting security assessments, automating vulnerability testing, partnering with engineering teams to define security requirements, troubleshooting security issues across systems and applications, and providing technical guidance on cybersecurity best practices. Requires 4-15+ years of cybersecurity/product security experience, strong knowledge of vulnerability management and risk assessment, hands-on experience with security testing and application validation, and familiarity with secure software development practices. Security certifications (CISSP, Security+) preferred; experience in regulated industries or healthcare a plus.
IT Manager
ExpiredLead IT operations and infrastructure for a mid-sized organization, managing a small IT team while maintaining hands-on involvement in day-to-day support. Oversee Microsoft 365, Azure, Entra ID, Intune, and Fortinet firewalls; administer LAN/WAN/VPN networks; ensure security, compliance, and business continuity; and partner with leadership on technology strategy and vendor management.… Requires 5+ years in systems and network administration in a Microsoft environment, 2+ years in a supervisory role, and expertise in endpoint management, disaster recovery, and troubleshooting.
Senior Manager leading cloud security architecture and strategy across AWS, Azure, GCP, and Oracle Cloud for consulting engagements. Oversees technical assessments, solution designs, and security implementations including CNAPP, CSPM, CWPP, IAM, and DevSecOps controls.… Manages onshore and offshore delivery teams, mentors practitioners, and contributes to business development and thought leadership. Requires 6+ years in cloud security consulting, 2+ years designing enterprise cloud security architectures, and 3+ years with cloud-native security technologies.
The Information System Security Officer (ISSO) serves as a steward of classified and high-side information systems, ensuring security compliance and operational resilience in accordance with DoD and DCSA standards. The role involves executing Risk Management Framework (RMF) activities, pursuing Authorization to Operate (ATO) via eMASS, conducting vulnerability scanning with tools like Nessus, and maintaining compliance with NISP and federal requirements.… Responsibilities include hands-on system administration, security monitoring, patch management, data transfer operations, and collaborative work with industrial security teams to integrate technical and administrative controls. Success requires proven experience processing ATO packages, system administration skills, security compliance knowledge, and the ability to balance rigorous security controls with operational effectiveness.
Serve as a primary administrator for core security technologies including Microsoft Defender Suite, Entra ID, Conditional Access, and endpoint protection, while also administering enterprise infrastructure across Microsoft 365, Azure, AWS, VMware, and hybrid platforms. Troubleshoot complex infrastructure and security issues, manage cloud backup and disaster recovery, monitor alerts through LogicMonitor and SIEM/MDR/SOCaaS services, and coordinate with security operations teams on investigations and remediation.… Requires 8+ years of hands-on experience in cybersecurity and infrastructure engineering in business-critical environments, with deep expertise in Microsoft identity and security technologies, cloud platforms, vulnerability management, and enterprise backup solutions. Participate in after-hours support and escalation activities as needed.