vulnerability-assessment jobs in San Diego

A Systems Network Engineer II/III role supporting naval and operational network environments, responsible for designing, implementing, and troubleshooting resilient network architectures while ensuring cybersecurity compliance and risk mitigation. The engineer will assess vulnerabilities, document configuration and design changes at line-level detail, coordinate engineering change and cyber authorization processes, and provide both on-site shipboard support and remote technical guidance.…See more The role requires expertise in network architecture, tactical data links, WAN design, cybersecurity policy, and Assessment & Authorization practices, with coordination across cloud, computer engineering, cybersecurity, and operational teams.

As a Staff Product Security Engineer at Qualcomm, you will develop and deploy hardware and software security features across the product lifecycle, perform comprehensive security assessments including vulnerability analysis and threat modeling, and conduct security code reviews. You will identify and remediate security risks, respond to product security incidents, and develop training and tools to embed secure development practices.…See more The role requires a strong foundation in programming languages (C, C++, Java, Python, SystemVerilog) and the ability to work independently on complex security engineering challenges with influence over organizational decisions.

Conduct software security assessments, vulnerability testing, penetration testing, and threat analysis on TrellisWare products. Perform static and dynamic analysis, reverse engineering, and incident investigation while ensuring compliance with FIPS 140, NIST STIG, and other regulatory standards.…See more Requires 5+ years industry experience with 3+ years software development and 2+ years vulnerability testing, proficiency in Python/C++/Java, and at least one security certification (Security+, CISSP, OSCP, or SANS/GIAC).

This role designs and implements cybersecurity architecture for complex electromagnetic and power systems across defense, space, and commercial programs. The Cybersecurity Architect develops secure network and system architectures aligned to NIST, DoD, and customer standards; performs vulnerability assessments and risk management; and serves as a technical liaison between security, hardware, software, and program teams.…See more The position requires deep expertise in cyber standards (NIST SP 800-53, NIST SP 800-171, DODI 8500.02, CNSSI 1253), secure system design, and incident response, plus the ability to communicate complex security issues and remediation strategies across all organizational levels.

The Security Assurance Lead will build and direct a multi-disciplinary security team responsible for end-to-end security validation across embedded systems, spacecraft, cloud infrastructure, and supply chain. The role owns security governance frameworks, risk management thresholds, and go/no-go sign-off for mission-critical launches and deployments.…See more Key responsibilities include leading red team exercises, defining organizational testing strategies and security KPIs, and translating vulnerability research into architectural improvements across firmware, hardware, CI/CD pipelines, and orbital systems.

Senior Network Engineer responsible for diagnosing and resolving complex network issues across a large enterprise airport infrastructure, including wired, wireless, and data center environments. Design and lead technical projects, develop enterprise system documentation and architecture, and support disaster recovery, compliance, and security assessments.…See more Maintain detailed network diagrams, standard operating procedures, and serve as a hands-on technical lead coordinating with vendors and stakeholders. Participate in on-call rotations for critical network operations.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation such as System Security Plans (SSP) and Security Assessment Reports (SARs).…See more The role requires in-depth knowledge of the Risk Management Framework, eMASS workflow, DISA compliance, and security categorization overlays. A minimum of 10+ years of cybersecurity or incident response experience is required, along with security certifications such as CISSP, CASP, CISM, CAP, or GSLC.

Senior Network Engineer at San Diego County Regional Airport Authority responsible for diagnosing and resolving complex network issues, developing enterprise systems analysis, leading infrastructure projects, and ensuring disaster recovery and compliance. The role requires hands-on technical leadership across wired, wireless, and data center environments with expertise in Cisco networking platforms (DNAC, ISE, ASA, FTD, ACI).…See more This position includes rotating on-call support for critical network operations and occasional airfield vehicle operation to access secure facilities.

The Cybersecurity Analyst will serve as a technical subject matter expert evaluating the cybersecurity posture of drone systems and components submitted to the Blue UAS Cleared List Program. You will review assessment reports, identify vulnerabilities and residual risks, validate remediation plans, and provide technical recommendations on compliance with NIST frameworks and DoD Risk Management Framework requirements.…See more The role requires expertise in embedded systems security, firmware analysis, wireless communications, encryption, authentication, and supply chain security. You must hold an active DoD 8570/8140 IAM or IAT Level II/III certification (CISSP, CISM, or Security+) and demonstrate proficiency with NIST SP 800-53 and NIST SP 800-161.

Implement, assess, and authorize security controls for IT management systems under the Risk Management Framework (RMF). Conduct security reconnaissance, identify gaps, develop Plans of Action and Milestones (POA&Ms), and maintain A&A documentation (SSPs, SAPs, SARs).…See more Manage eMASS compliance, STIG assessments, and coordinate accreditation workflows. Requires 10+ years of cybersecurity experience, an active Secret clearance, IAT Level III certification (CISSP preferred), and hands-on A&A and ATO submission experience.

The Cybersecurity Engineer III will support Risk Management Framework (RMF) activities, Assessment & Authorization (A&A) processes, and continuous monitoring for DoD accredited systems. Responsibilities include developing and maintaining security documentation (SSPs, SAPs, SARs, POA&Ms), performing vulnerability assessments, managing eMASS tasking, and conducting security control validation and testing.…See more The role requires 10+ years in cybersecurity, RMF compliance, or incident response; expertise with eMASS, DISA STIGs, and vulnerability assessment tools; and an active Secret clearance with DoD 8570/8140 IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH).

Senior Staff Product Security Engineer responsible for security incident response, vulnerability detection and mitigation across Qualcomm products, particularly in mobile, IoT, and automotive domains. The role involves binary analysis and reverse engineering of exploits, secure code review, vulnerability assessment, security testing, and coordinating with external security researchers and customers on patch adoption and disclosure.…See more Requires 6+ years of security engineering experience with expertise in at least two areas such as binary analysis, incident response, fuzzing, malware analysis, embedded firmware security, or automotive security. Must work independently, evaluate new security tools and technologies, and communicate technical findings internally and externally.

Senior Infrastructure & Security Engineer responsible for administering and securing Microsoft 365, Azure, and Entra ID environments, including identity controls, conditional access, and MFA enforcement. The role encompasses data protection through DLP policies and Microsoft Purview, endpoint security via CrowdStrike, Windows Server and Active Directory infrastructure, virtualization (VMware, Azure), backup/disaster recovery, and establishing governance standards for AI platforms.…See more Requires 7+ years of progressive IT infrastructure and security experience with strong expertise in Microsoft cloud services, identity management, and enterprise networking.

This Cybersecurity Engineer II role involves designing, engineering, integrating, testing, and deploying cybersecurity and network defense solutions across complex DoD environments. The position requires planning and executing National Security and Cybersecurity assessments, configuring enterprise tools such as Splunk Enterprise, IDS/IPS, firewalls, and vulnerability management platforms, and conducting network and security analysis using tools like Wireshark and Tenable.…See more The engineer will leverage automation, scripting, APIs, and generative AI to improve cybersecurity operations while supporting the full acquisition, integration, deployment, and sustainment lifecycle for DoD Computer Network Defense requirements.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, including maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SARs), and managing eMASS tasking throughout the accreditation cycle.…See more The role requires in-depth knowledge of the Risk Management Framework, DISA circuit connections, and cloud service provider inheritance. This position requires a Secret clearance, IAT Level III certification, and one of several advanced certifications (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), plus 10+ years of cybersecurity or incident response experience.

Design and implement security and privacy controls for on-device AI features on Snap OS, including model integrity, secure data handling, inference-time privacy protections, and sensor access controls. Research and develop security features across firmware, applications, system services, and cloud-connected device surfaces.…See more Improve fuzzing infrastructure, automated security testing, and continuous validation pipelines for OS components, IPC mechanisms, parsers, drivers, firmware, and AI data flows. Requires 5+ years developing production software in C, C++, or Rust and 3+ years building security or platform protection features for Linux-based, embedded, mobile, or wearable systems.

Architect and maintain ServiceNow security controls aligned to DoD Zero Trust architecture in FedRAMP High and DoD IL4/IL5 environments. Configure role-based access controls (RBAC), access control lists (ACLs), data policies, and edge encryption; maintain security matrices and enforce information-level segregation.…See more Develop System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts to support ATO attainment and sustainment. Conduct vulnerability assessments, continuous monitoring, manage Plans of Action and Milestones (POA&M), and generate security assessment reports.

The Cybersecurity Engineer II will perform system hardening on Windows and Linux systems per DoD standards, implement and maintain STIGs, conduct vulnerability assessments using ACAS, and remediate security findings. The role requires 5 years of hands-on experience with STIG implementation, vulnerability assessment tools, vendor patching, and security compliance initiatives.…See more A Bachelor's degree in Cybersecurity or related field plus one or more certifications (CCNA, CySA+, GICSP, GSEC, Security+, or SSCP) and an active Secret clearance are required.

This role performs system hardening, vulnerability management, and STIG implementation across Windows and Linux systems in compliance with DoD cybersecurity standards. The Cybersecurity Engineer II will conduct vulnerability assessments using ACAS, analyze and remediate security findings, apply patches and updates, and support compliance and continuous monitoring activities.…See more The position requires a Bachelor's degree in Cybersecurity or related field, one or more IAT Level II certifications (CCNA, CySA+, GICSP, GSEC, Security+, or SSCP), and 5 years of demonstrated hands-on experience in system hardening and vulnerability remediation in DoD environments.

As a Cybersecurity Systems Engineer, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You'll troubleshoot complex security challenges, manage Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities, and implement cybersecurity controls using tools like ACAS, STIGs, and eMASS.…See more The role requires 3+ years of DoD/government IT experience, expertise in operating systems (Windows, Linux), network infrastructure (routers, switches, firewalls, zero-trust), and compliance testing. You will communicate security findings to both technical and non-technical audiences while identifying advanced threats and supporting Navy missions.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military systems, performing vulnerability assessments, risk analysis, and security compliance testing across networks, systems, and applications. You'll work with DoD Risk Management Framework (RMF) processes, manage security assessment and authorization activities, and use tools like eMASS, ACAS, and STIG scanning to identify threats and implement infrastructure controls.…See more The role requires 4+ years of IT experience with a DoD or government agency, 4+ years leading Navy RMF activities, and 3+ years implementing security controls and performing vulnerability remediation. You'll communicate security complexities to technical and non-technical audiences while supporting critical Navy mission areas.

As a Product Security Engineer 3, you will monitor industry cybersecurity threats and assess their risk to Hologic's diagnostic products, perform vulnerability assessments and security testing, and collaborate with software engineers and field service teams to implement security requirements and qualify networked medical devices. You will develop and automate test procedures for OS patches and anti-virus software, troubleshoot security and network issues in computer-based products, and educate internal teams on network security topics.…See more The role requires a Bachelor's or Master's degree in Computer Science or related field with 4–8 years of experience in computer/network security, Windows and Linux administration, and cybersecurity risk assessment, preferably with medical device or healthcare industry background.