supply-chain-security jobs in San Diego

Secure the application development lifecycle and software supply chain as a Security Engineer, embedding with engineering teams to design and implement threat modeling, secure code review, SAST/DAST/SCA integration into CI/CD pipelines, and secrets management. Own dependency and supply-chain security including SCA, SBOMs, and artifact signing, while designing hardened infrastructure patterns for self-hosted applications across AWS, Azure, and on-premises.…See more Build durable tooling through scripting and Infrastructure-as-Code to scale security across the organization, making secure deployment and controls the default rather than exceptions.

Lead the security assurance organization at Logos Space, responsible for defining security governance frameworks and leading a multi-disciplinary team of red teamers, vulnerability researchers, and penetration testers across embedded systems, spacecraft, supply chain, cloud infrastructure, and ground-based communications. You will own security sign-off for mission-critical software and hardware releases, establish vulnerability remediation thresholds, conduct adversarial modeling and red team exercises, and translate deep-dive security findings into architectural improvements.…See more The role requires 10–12+ years of security engineering experience with at least 5+ years in senior leadership of offensive security or assurance teams, plus demonstrable expertise leading security assurance programs for safety-critical aerospace or defense systems.

The Security Assurance Lead will build and direct a multi-disciplinary security team responsible for end-to-end security validation across embedded systems, spacecraft, cloud infrastructure, and supply chain. The role owns security governance frameworks, risk management thresholds, and go/no-go sign-off for mission-critical launches and deployments.…See more Key responsibilities include leading red team exercises, defining organizational testing strategies and security KPIs, and translating vulnerability research into architectural improvements across firmware, hardware, CI/CD pipelines, and orbital systems.

The Cybersecurity Analyst will serve as a technical subject matter expert evaluating the cybersecurity posture of drone systems and components submitted to the Blue UAS Cleared List Program. You will review assessment reports, identify vulnerabilities and residual risks, validate remediation plans, and provide technical recommendations on compliance with NIST frameworks and DoD Risk Management Framework requirements.…See more The role requires expertise in embedded systems security, firmware analysis, wireless communications, encryption, authentication, and supply chain security. You must hold an active DoD 8570/8140 IAM or IAT Level II/III certification (CISSP, CISM, or Security+) and demonstrate proficiency with NIST SP 800-53 and NIST SP 800-161.

Lead detection operations, incident response, and security operations maturation for a growing security team. Operate SIEM/XDR across endpoint, cloud, identity, network, and SaaS telemetry; conduct complex investigations; tune detections; and drive root-cause analysis and post-incident improvements.…See more Require 6+ years of hands-on security operations, detection engineering, or incident response experience with deep proficiency in SIEM/XDR query languages, EDR platforms, scripting (Python, PowerShell, Bash), and MITRE ATT&CK framework application. Mentor analysts, define playbooks and runbooks, lead threat hunts, and own SecOps metrics and operational-readiness reporting.

This is a hands-on security engineering role focused on running Saronic's cyber threat intelligence program. The engineer will track nation-state and advanced criminal adversaries targeting the defense industrial base, operationalize indicators and TTPs into detections and hunts, produce finished intelligence products, and fuse external threat feeds with internal telemetry to prioritize real exposures.…See more The role requires 4+ years in cyber threat intelligence, threat hunting, detection engineering, or intrusion analysis with demonstrable experience tracking sophisticated or state-sponsored adversaries.

Lead an embedded Linux software team building mission-critical defense systems, splitting time between management and individual contribution. Design and implement C/C++ Linux daemons, REST APIs, and system services for aerial platforms and deployable manufacturing infrastructure.…See more Manage team standups, architecture reviews, and cross-functional coordination with autonomy, avionics, and mechanical/electrical engineering. Engineer for real-time performance, security, and reliability while owning developer experience, CI/CD pipelines, and field operability.

Qualcomm is seeking an experienced SoC Security Architect to design and define next-generation security architecture for datacenter System-on-Chips, focusing on confidential computing platforms, secure debug, and manageability features. The role requires architecting foundational security capabilities such as secure boot, attestation, hardware/firmware provenance, isolation, access control, and key management while ensuring compliance with industry standards.…See more The ideal candidate has 6+ years of hardware/systems engineering experience, deep knowledge of SoC architecture for datacenter environments, and proven expertise in threat modeling, security requirements development, and security architecture implementation. Strong analytical, problem-solving, and technical communication skills are essential for collaborating with platform architects and leadership across the organization.