This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.… The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.
threat-modeling jobs in San Diego
Design and implement security and privacy controls for on-device AI features on Snap OS, including model integrity, secure data handling, inference-time privacy protections, and sensor access controls. Research and develop security features across firmware, applications, system services, and cloud-connected device surfaces.… Improve fuzzing infrastructure, automated security testing, and continuous validation pipelines for OS components, IPC mechanisms, parsers, drivers, firmware, and AI data flows. Requires 5+ years developing production software in C, C++, or Rust and 3+ years building security or platform protection features for Linux-based, embedded, mobile, or wearable systems.
This Staff Engineer role owns and executes BD's product security lifecycle for FDA-regulated medical device dispensing systems and their cloud platforms. Key responsibilities include defining end-to-end security architecture, conducting threat modeling and risk assessments, implementing secure SDLC practices aligned to NIST/OWASP/BSIMM, managing SBOMs and vulnerability remediation, and ensuring regulatory compliance (IEC 62304, ISO 14971, FDA cybersecurity guidance).… The role requires 5+ years of cybersecurity experience with FDA Class I/II devices, hands-on expertise in embedded/cloud/application security, and the ability to balance security controls with usability while supporting FDA submissions.
This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.… The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).
Senior embedded software engineer role developing mission-critical firmware for Amazon's Leo satellite constellation. Responsibilities include architecting ASIC firmware, RF communication subsystems, secure boot operations, real-time embedded software, and hardware interfaces using protocols like I2C, SPI, UART, and Ethernet.… The role requires security-by-design principles, threat modeling, secure coding practices, and collaboration with hardware architects and systems engineers to bring custom silicon from concept through secure bring-up and production integration.
Qualcomm is seeking an experienced SoC Security Architect to design and define next-generation security architecture for datacenter System-on-Chips, focusing on confidential computing platforms, secure debug, and manageability features. The role requires architecting foundational security capabilities such as secure boot, attestation, hardware/firmware provenance, isolation, access control, and key management while ensuring compliance with industry standards.… The ideal candidate has 6+ years of hardware/systems engineering experience, deep knowledge of SoC architecture for datacenter environments, and proven expertise in threat modeling, security requirements development, and security architecture implementation. Strong analytical, problem-solving, and technical communication skills are essential for collaborating with platform architects and leadership across the organization.
This is a hands-on product security role focused on threat modeling and cybersecurity risk management for medical devices and SaMD platforms. You'll conduct security risk assessments, build FDA submission documentation (510(k) files, risk management files, SBOMs), review security architecture, and maintain risk and vulnerability management plans.… The role requires 5+ years of cybersecurity or product security experience, with strong preference for FDA documentation and regulated medical device background, and working knowledge of NIST frameworks, OWASP, and secure SDLC practices.