vulnerability-assessment jobs in San Diego

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. The role requires deep expertise in the Risk Management Framework, including designing and tailoring security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing comprehensive A&A documentation (SSP, SAP, SARs).…See more Responsibilities include adherence to eMASS scheduled tasking, quarterly IV&V and STIG checks, annual security reviews, monthly POA&M updates, and managing DISA circuit connections and inheritance workflows. The position requires 10+ years of cybersecurity or incident-response experience and one of several security certifications (CASP+, CAP, CISM, CISSP, or GSLC).

Senior security engineer responsible for conducting comprehensive vulnerability assessments across OT/IT infrastructure at a water utility, including PLCs, SCADA systems, HMIs, network devices, and remote telemetry sites. Will evaluate architecture, network segmentation, boundary security, remote/vendor access controls, patch management, and governance practices against industry standards (IEC 62443, NIST SP 800-82).…See more Deliverables include risk-rated findings, prioritized remediation roadmaps, and executive-level reporting. Requires 6+ years cybersecurity experience with at least 3 years hands-on OT/ICS work and completion of at least two end-to-end OT security assessments.

Develop and optimize Linux Kernel features for ARM-based systems, focusing on virtualization (KVM), scheduling, memory management (IOMMU), and power/performance technologies (DVFS). Debug complex software issues using JTAG and other tools, contribute to upstream open-source projects, and drive system software improvements for ARMv8/ARMv9 platforms.…See more Perform pre-silicon development on FPGA and QEMU platforms, analyze system requirements, and propose corresponding architectures. Lead security initiatives including threat analysis, vulnerability assessments, and secure product development processes.

Develop and optimize Linux Kernel features for ARM-based systems, focusing on virtualization (KVM), scheduling, memory management (IOMMU), and power management (DVFS). Debug complex software issues using JTAG debuggers, contribute to upstream open-source projects, and drive system software improvements for ARMv8/ARMv9 platforms.…See more Perform pre-silicon development on FPGA and QEMU platforms, and conduct security assessments and architecture design for highly critical hardware and software features. Supervise direct reports and lead cross-organizational teams on security implementation and product lifecycle management.

Lead cybersecurity program delivery for NSWC Corona's Risk Management Framework and continuous authorization services. Manage a team of ISSMs, ISSOs, and cybersecurity analysts while serving as primary interface with Navy leadership and government stakeholders.…See more Oversee contract lifecycle, financials, and compliance across A&A packages and continuous monitoring; drive process improvements in eMASS workflows and RMF execution. Provide strategic guidance on DoD/Navy cybersecurity policy, emerging threats, and system acquisition integration.

Cybersecurity Engineer I supporting Assessment & Authorization accreditation efforts under the NIWC PAC contract. Responsibilities include maintaining cybersecurity monitoring operations, conducting vulnerability assessments, performing incident triage, developing A&A documentation (SSP, SAP, SAR), managing POA&Ms, and adhering to Risk Management Framework and eMASS scheduled tasking cycles including STIG checks and ATO/ATC processes.…See more Requires a Bachelor's degree in Cybersecurity, IT, or related field, 1+ years of relevant experience, and IAT II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).

Senior Principal Cybersecurity Engineer supporting DoD Navy communication systems, responsible for planning and executing penetration tests, performing network traffic analysis, architecting hardened IT systems in classified environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards. Requires 14+ years of experience (or 12+ with master's degree), with 5–7 years in hands-on cybersecurity engineering and 5+ years designing/implementing hardened systems in classified settings.…See more Must hold an active Top Secret clearance and be able to obtain TS/SCI.

As a Cybersecurity Engineer and Risk Analyst, you will identify vulnerabilities, assess security threats, and implement infrastructure and cybersecurity controls to protect military systems. You'll conduct risk and vulnerability assessments across networks, systems, and applications, work with Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes, and develop security solutions using tools like ACAS, STIGs, and eMASS.…See more The role requires 4+ years of DoD/government IT experience, hands-on cybersecurity compliance testing, and the ability to communicate complex security concepts to technical and non-technical audiences.

Epsilon C5I seeks a Cybersecurity Engineering SME with 5+ years of DoD cybersecurity experience to plan, implement, and monitor cyber defense measures for command and control systems. The role requires assessing vulnerabilities, implementing security controls, responding to breaches, and ensuring compliance with cybersecurity policy and Assessment and Authorization requirements.…See more A Bachelor's degree in Cybersecurity, Computer Science, or related field is required, along with DoD IAT Level II certification and an active TS/SCI clearance.

As a Cybersecurity Systems Engineer, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You'll work with Navy Risk Management Framework (RMF) processes, manage security controls and compliance testing using tools like eMASS and ACAS, and identify cyber threats using vulnerability scanning and big-data analytics.…See more The role requires 3+ years of DoD/government IT experience, expertise in RMF/A&A activities, and hands-on knowledge of Windows, Linux, cloud platforms, network infrastructure (routers, switches, firewalls, NIPR/SIPR), and security compliance tools. You'll communicate security complexities to diverse audiences and deliver client solutions from inception through completion.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing vulnerability assessments, risk analysis, and compliance testing across networks, systems, and applications. You'll work with Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes, leverage tools like ACAS and eMASS to identify threats and security gaps, and communicate security findings to both technical and non-technical audiences.…See more The role requires hands-on experience with security controls, policy implementation, and infrastructure protection using industry-standard scanning and compliance tools.

ManTech seeks an Information System Security Officer to maintain Assessment & Authorization (A&A) documentation per NIST and DoD standards, track compliance deficiencies via Plans of Action and Milestones, implement continuous monitoring strategies, and oversee audit log systems and patch management. The role requires managing security tools, evaluating system configuration changes, and supporting an Information System Security Manager (ISSM) with compliance and incident response procedures.…See more Candidates must hold Security+ certification, have 2+ years of RMF and NIST SP 800-53 experience, and possess an active Top Secret clearance with SCI eligibility.

Prepare, develop, and maintain Risk Management Framework (RMF) artifacts and packages to support system authorization and compliance with DoD standards. Perform risk and vulnerability assessments across networks, systems, and applications, and coordinate cybersecurity operations with technical leads to identify threats and develop mitigation strategies.…See more Implement security controls, execute compliance testing using industry tools like eMASS and ACAS, and deliver security briefings to stakeholders incorporating NIST controls analysis. Work independently to devise solutions, communicate technical findings to mixed audiences, and lead projects from inception through completion.

Design and implement secure system architectures for complex defense and aerospace programs, ensuring compliance with DoD and NIST cybersecurity standards (DORI 8500.02, CNSSI 1253, NIST SP 800-53, NIST SP 800-171). Perform vulnerability assessments, risk management, and security evaluations across hardware and software; develop Risk Management documents and Secure Technical Implementation Guides; serve as liaison between cybersecurity, hardware, software, and program management to identify and remediate security issues.…See more Requires hands-on understanding of both system operations and hardware-software interactions, with ability to communicate technical security solutions to engineering and leadership teams.

Design and build on-device security systems for Snap's Specs wearable devices, including permissions, access control, sandboxing, and trusted execution boundaries. Develop security and privacy controls for on-device AI features, focusing on model integrity, sensitive data handling, and inference-time protections.…See more Research and implement security features across Snap OS, firmware, applications, and cloud-connected surfaces. Improve fuzzing infrastructure, automated security testing, and continuous validation pipelines for OS components, IPC mechanisms, and AI data flows.

Lead cybersecurity and compliance activities for classified DoD and Special Access Program Information Systems. Manage Risk Management Framework (RMF) authorization packages, security control assessments, and continuous monitoring.…See more Coordinate with Security Control Assessors, Authorizing Officials, and Program Security Officers to achieve and maintain authorization to operate (ATO). Evaluate vulnerabilities, security deficiencies, and risks while developing mitigation strategies in a fast-paced, regulated environment.

Principal Cyber Architect supporting DoD systems engineering teams on Assessment and Authorization (A&A) activities, cyber design and implementation, and DevSecOps integration. Responsibilities include conducting vulnerability assessments, analyzing static/dynamic code scans, developing system security plans, and ensuring compliance with RMF controls and DISA STIGs.…See more Requires Bachelor's in Cyber/Systems/Software/Electrical Engineering plus 6+ years of experience and one DoDM 8140 compliant certification (CCSP, CISSP-ISSEP/ISSAP, CSSLP, or Cloud+). Experience with MBSE, Cameo, Zero Trust Architecture, threat modeling, and offensive security analysis preferred.

SAIC seeks a Principal Cybersecurity Engineer to perform penetration testing, vulnerability assessments, and security architecture work on classified Navy communication systems. The role requires hands-on expertise in network traffic analysis (Wireshark), hardened IT systems design, DoD/IC security frameworks (NIST RMF, DISA STIG), and offensive security techniques against DoD/IC infrastructure.…See more Candidates must have 9+ years total experience (5–7 years in cybersecurity engineering, 5+ in classified/high-security environments), proven red-team capabilities, and an active Top Secret clearance with ability to obtain TS/SCI.

Senior Staff Security Engineer responsible for developing hardware and software security features, conducting advanced security assessments and vulnerability analysis, and designing security architectures for Qualcomm products. The role requires deep security expertise to identify design and implementation vulnerabilities, lead cross-organizational teams on security adoption, and ensure product security throughout the lifecycle.…See more Requires a bachelor's degree in Engineering or Computer Science with 6+ years of security engineering experience (or equivalent with advanced degree), plus proficiency in programming languages like C, C++, Java, or Python.

Senior Staff Security Engineer responsible for developing and implementing hardware and software security features across Qualcomm products. Performs advanced security assessments, vulnerability and threat analysis, and develops critical security architectures while leading cross-organizational teams.…See more Requires 6+ years of security engineering experience with a bachelor's degree in engineering or computer science (or equivalent with advanced degree), and proficiency in programming languages such as C, C++, Java, or Python.

As a Fullstack Software Engineer, you will design and build modern web applications and APIs for financial technology, working across ReactJS/TypeScript frontends and backend systems (Node.js, Java/Spring) that handle large-scale transactions with real-time processing. You'll own end-to-end features, implement secure and compliant systems with advanced security practices (CSP, encryption, vulnerability assessment), and optimize for performance and scalability.…See more The role requires 5+ years of software engineering experience with strong proficiency in React, modern JavaScript/TypeScript, backend frameworks, SQL/NoSQL databases, and testing frameworks (Jest, Cypress, Playwright). You'll collaborate with engineers, designers, and product managers in an agile environment, participate in code reviews, and mentor junior developers.

Senior Embedded Software Engineer responsible for developing complex real-time embedded systems for electroporation therapy delivery, including firmware, device drivers, middleware, embedded UI applications, and system-level software. The role requires 7+ years of embedded software development experience with modern C++, ARM Cortex-M processors, RTOS frameworks (ThreadX, FreeRTOS, etc.), and expertise in real-time control systems, closed-loop feedback, safety-critical software, and cybersecurity implementation.…See more Responsibilities span architecture design, hardware-software integration, verification and validation, CI/CD support, and cross-functional collaboration with electrical, mechanical, and regulatory teams. The candidate must demonstrate proficiency with embedded development tools, debugging hardware, IEC 62304/IEC 60601 compliance standards, and FDA cybersecurity guidance.

This Systems Network Engineer II/III role focuses on designing, implementing, and sustaining network systems across shipboard, enterprise, and tactical environments while ensuring cybersecurity compliance and resilience. The engineer will assess vulnerabilities and risks, propose remediation and mitigation strategies, document configuration and architecture changes, and coordinate engineering change and security authorization processes.…See more The role requires coordinating across cloud, computer engineering, cybersecurity, and operational stakeholders to support production and operational events, including on-ship testing and implementation. Candidates must have a Bachelor's degree plus 9+ years of experience (or equivalent with advanced degree) and an active Secret clearance with ability to obtain TS/SCI.

This role supports cybersecurity and compliance efforts across the Risk Management Framework (RMF) process for DoD programs. Responsibilities include developing and maintaining system security documentation, Plans of Action and Milestones (POA&Ms), assessing security controls, conducting vulnerability scanning and audits, and ensuring continuous monitoring of systems compliance.…See more The position requires IAM Level I certification (DoD 8570.1M), 4+ years of information security or cybersecurity experience, and hands-on proficiency with compliance and vulnerability scanning tools such as Nessus, SCAP, ACAS, and SCC on Windows, Linux, and network devices.

Senior embedded software engineer leading secure firmware development for satellite communication systems. Designs and implements hardware interfaces using protocols like I2C, SPI, UART, and Ethernet with embedded security controls.…See more Collaborates with hardware architects and security teams to bring custom silicon from concept through secure verification and production integration. Requires 7+ years of professional software engineering with deep expertise in secure embedded systems, RTOS, real-time constraints, threat modeling, and penetration testing methodologies.