threat-detection jobs in San Diego

Security Operations Center (SOC) Analyst II responsible for monitoring, triaging, investigating, and responding to security events from SIEM systems, threat intelligence platforms, endpoints, and networks. The role involves configuring SIEM and SOAR tools, enforcing information security policies, identifying IT security risks, escalating incidents to responders, and staying current with evolving threat detection methods.…See more Requires 2+ years of SOC analyst experience and strong collaboration in a fast-paced team environment.

Lead the design, delivery, and operationalization of enterprise SOAR (Security Orchestration, Automation and Response) solutions for clients, managing technical teams and complex workstreams. Architect security automation integrations across SIEM, EDR/XDR, IAM, cloud, and other enterprise platforms using Python, PowerShell, JavaScript, and REST APIs.…See more Drive SOC process improvements, incident response automation, and governance of production workflows while translating operational requirements into scalable target-state architectures and business cases. Mentor teams, manage client-facing engagements, and communicate technical recommendations to senior stakeholders in a consulting environment.

Lead the design and implementation of enterprise security enforcement technologies, including SIEM platforms, endpoint security, threat detection, and incident response systems. Develop and maintain a forward-looking cybersecurity technology roadmap aligned with NIST frameworks and business objectives, evaluating emerging threats and technologies to strengthen organizational security capabilities.…See more Conduct threat hunting, penetration testing, and detection engineering activities while driving automation of security controls, policy enforcement, and response across complex technology environments. Mentor cybersecurity teams and influence enterprise security strategy across large organizations, with demonstrated experience securing AI-enabled solutions and understanding AI-specific security considerations.

A pre-sales architect who drives security opportunities from identification through delivery, working closely with clients to understand their security concerns and design tailored cyber security solutions. The role combines sales engineering, solution architecture, and technical advisory—qualifying opportunities, building reference architectures, delivering technical presentations and demos, and acting as a trusted consultant to optimize clients' security strategies.…See more Requires deep knowledge of security tools (vulnerability management, threat detection, IAM, infrastructure, cloud), ability to manage proposals and pipeline, and capacity to mentor team members and provide thought leadership.

This role designs, implements, and optimizes enterprise security systems including firewalls, VPNs, and segmentation controls while developing automation scripts to streamline deployments and enhance threat detection. The architect will leverage network observability and security telemetry to validate policies, identify vulnerabilities, manage patch compliance, and produce metrics for operational visibility.…See more Responsibilities include mentoring security teams, advising on security best practices aligned with business needs, and collaborating on process improvements and incident response workflows. Required: 5+ years progressive cybersecurity experience (3+ with master's degree); preferred: hands-on NGFW expertise, intermediate certifications (GSEC, CEH, CySA+), and scripting proficiency in Python, PowerShell, Bash, or Java.

Design, build, test, and operate production ML and LLM-powered components for cybersecurity applications at scale. You will turn ambiguous requirements into working code, partner across product and security teams, and apply AI safety and guardrail practices.…See more The role requires solid software engineering fundamentals, hands-on experience building production ML/LLM applications (RAG, embeddings, agents), and the ability to take prototypes to reliable, maintainable systems. You'll work with distributed systems, cloud-native technologies, and graph/data plumbing while contributing to code reviews and raising team quality standards.

The Cybersecurity Analyst leads Bumble Bee's day-to-day cybersecurity operations, investigating and responding to security incidents, hunting threats, and tuning detection tooling. The role owns the full incident response lifecycle, manages vulnerability remediation, optimizes SIEM platforms, conducts security risk assessments for platforms and vendors, and maintains compliance through access control reviews and policy development.…See more The analyst builds incident response playbooks, monitors threat intelligence and CVE disclosures, and advises on third-party cyber risk. The position requires 4+ years of cybersecurity experience, proficiency with SIEM platforms, EDR tools, vulnerability management, MITRE ATT&CK framework, and knowledge of NIST, SOC, and ISO standards.

The Information Security Analyst II will protect both operational technology (OT) and information technology (IT) environments at a pharmaceutical manufacturer. Responsibilities include securing industrial control systems, SCADA platforms, PLC-based automation, manufacturing execution systems, and enterprise endpoints; managing OT asset inventory and vulnerability remediation; implementing security controls and hardening standards; and supporting threat detection, incident response, and security assessments.…See more The role requires 3+ years in information security or system administration with direct OT/ICS/SCADA/manufacturing experience, working knowledge of Purdue Enterprise Reference Architecture and relevant standards (ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0), and hands-on experience with endpoint security, vulnerability management, and Windows/Active Directory administration.

Staff-level AWS cloud security engineer responsible for designing, implementing, and enhancing security controls across AWS environments. The role involves monitoring and responding to security threats, conducting assessments, developing security standards and policies, and supporting AI/ML platforms and data pipelines.…See more Requires 8+ years of cybersecurity experience, 3+ years hands-on AWS security expertise, and an AWS Security certification, with strong knowledge of IAM, CloudTrail, Security Hub, GuardDuty, KMS, and VPC.

The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establishing governance frameworks aligned with industry standards like NIST, ISO, and SOC 2. The role requires leading threat detection, incident response, digital forensics, and vulnerability management while protecting client confidentiality and attorney-client privilege through robust technical and procedural controls.…See more The candidate must ensure secure architecture across cloud, on-premise, and hybrid environments and drive compliance with data protection and privacy regulations including GDPR, CCPA, and HIPAA. This is a senior executive position requiring 8+ years of cybersecurity experience and 6+ years in a senior leadership role managing global security programs.

This role combines incident response, forensic analysis, and security operations responsibilities, requiring hands-on experience with cybersecurity tools, patch management, and security system optimization. The analyst will develop automation scripts (Python, PowerShell, Bash), manage firewalls and VPN systems, leverage network observability and security telemetry for threat detection, and support incident response workflows.…See more The position demands 2–5 years of progressive cybersecurity experience, intermediate certifications (GSEC, CEH, CySA+), and familiarity with NGFW technologies, cloud platforms (AWS, Azure), and security frameworks.

Lead a team of security engineers responsible for deploying, integrating, optimizing, and managing enterprise cybersecurity platforms including SIEM (Splunk, Elasticsearch), XDR, EDR, email gateways, and vulnerability management across on-premises and cloud environments. Develop and execute cybersecurity tooling strategy aligned with business objectives, regulatory requirements (NIST CSF, ISO 27001, SOC 2, PCI-DSS), and industry best practices.…See more Automate threat detection, response, compliance reporting, and operational workflows using Python, PowerShell, and Bash. Mentor security engineering teams while managing budgets, cross-functional partnerships, and executive reporting on security posture and tooling effectiveness.

As a Cybersecurity Systems Engineer, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You'll troubleshoot complex security challenges, manage Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities, and implement cybersecurity controls using tools like ACAS, STIGs, and eMASS.…See more The role requires 3+ years of DoD/government IT experience, expertise in operating systems (Windows, Linux), network infrastructure (routers, switches, firewalls, zero-trust), and compliance testing. You will communicate security findings to both technical and non-technical audiences while identifying advanced threats and supporting Navy missions.