vulnerability-management jobs in San Diego

Lead vulnerability and patch management operations across infrastructure, middleware, and applications for Deloitte's Cyber Defense & Resilience team. Prioritize remediation activities using threat intelligence, exploitability data, and attack paths; manage remediation workflows and patch deployment at scale.…See more Mentor junior practitioners, develop client deliverables, and drive process improvements that reduce cyber risk. Requires 10+ years in IT/information security with hands-on experience in vulnerability management tools, remediation automation, and ITSM platforms.

As a Research Cybersecurity Analyst, you will review research contracts, proposals, and data-use agreements to identify security and compliance requirements, then conduct risk assessments and recommend practical safeguards. You will coordinate security controls across cloud and on-premises research environments, assess architectures for identity management, encryption, and network segmentation, and develop compliance documentation (SSPs, POA&Ms) for sponsor audits and CMMC readiness.…See more You will work with researchers, IT teams, and compliance partners to interpret regulatory requirements, map them to controls, and explain technical security obligations in practical terms to non-technical stakeholders. Experience in NIST frameworks, security assessments, vulnerability management, and regulated environments (higher education, research, healthcare, government, defense) is especially valued.

This role supports research teams at a university by reviewing security requirements in research contracts and proposals, conducting risk and compliance assessments, and recommending practical security approaches. The analyst will coordinate security controls across cloud and on-premises research environments, assess security architectures and configurations, and develop compliance documentation including SSPs and POA&Ms.…See more The role requires interpreting cybersecurity frameworks (NIST SP 800-171, CMMC, NIST SP 800-53) and communicating technical requirements to researchers and non-technical stakeholders across identity and access management, encryption, vulnerability management, and network security.

VP of Corporate IT responsible for developing and executing enterprise IT strategy, building and leading a high-performing Corporate IT organization, and advising executive leadership on technology, security, and operational risk. The role encompasses enterprise applications, employee technology, infrastructure, identity and access management, security operations, vendor management, and driving automation and cost efficiency across corporate systems.…See more Requires 15+ years of progressive IT leadership experience, including demonstrated success building or improving enterprise IT operating models in complex, regulated, or security-sensitive environments.

Research Cybersecurity Analyst at San Diego State University responsible for reviewing research proposals, contracts, and data-use agreements to identify cybersecurity and compliance requirements; conducting risk assessments and recommending remediation strategies; coordinating security controls across cloud and on-premises research environments; and developing compliance documentation (SSPs, POA&Ms) to support audits and assessments. The role requires interpreting security frameworks (NIST SP 800-171, CMMC, NIST SP 800-53) and communicating technical requirements to researchers and non-technical stakeholders while evaluating security architectures, access controls, encryption, and vulnerability management.See more

Systems Network Engineer II/III will design, implement, and support resilient network architectures across shipboard and enterprise environments while ensuring cybersecurity compliance and risk mitigation. The role requires assessing vulnerabilities, proposing remediation strategies, documenting configuration and architectural changes at engineering level, and coordinating approvals through engineering change and cybersecurity governance processes.…See more The person will support operational events with hands-on testing and implementation aboard ship, provide training to ship's force, and liaise across cloud, computer engineering, cybersecurity, and operational teams. A Bachelor's degree with 9+ years of network engineering, tactical networks, or related infrastructure experience is required, along with an active Secret clearance and ability to obtain TS/SCI.

Senior IT Cyber Security Specialist responsible for enterprise vulnerability scanning, system hardening, and patch management using tools like Nessus and HBSS. Administers security technologies including SIEM platforms, firewalls, endpoint protection, and VPNs while investigating security incidents and performing root cause analysis.…See more Requires 7+ years of progressive IT/cybersecurity experience in DoD or defense contractor environments, with strong Linux administration and Bash scripting skills. Must hold DoD 8570.1-M IAM Level III certification (CISSP, CISM, or GSLC) and maintain compliance with NIST SP 800-171, CMMC Level 2, and DISA STIGs.

This role involves conducting comprehensive security assessments of AI systems and deployments, evaluating them against NIST frameworks (AI RMF, CSF, 800-53, 800-171) and other security standards. The consultant will identify AI-specific risks such as prompt injection, model misuse, data leakage, and supply-chain vulnerabilities across cloud platforms (AWS, Azure, hybrid).…See more Responsibilities include developing AI governance frameworks, policies, and controls; assessing AI development environments, model pipelines, APIs, and orchestration layers; and delivering executive-level recommendations and remediation roadmaps. Requires 7+ years of cybersecurity/consulting experience and 3+ years supporting AI/machine learning security initiatives, with strong expertise in AI threat modeling, secure AI deployment, and governance frameworks.

Level II Systems Engineer role combining architectural oversight, hands-on server administration, and cybersecurity compliance in a secure defense environment. Responsibilities include continuous software sustainment, zero-downtime production deployments, Linux/Windows enterprise server administration (including VMware vSphere and AWS), Agile methodology application, and DISA STIG compliance enforcement.…See more Requires 3+ years systems engineering experience with modern Agile practices and 2+ years recent operational experience administering scalable virtualized enterprise environments.

Cybersecurity Engineer responsible for comprehensive vulnerability management, security assessments, and risk mitigation across systems, networks, and data. Conducts STIG compliance checks, system security testing in lab and field environments, and collaborates with engineering teams on remediation prioritization and Risk Management Framework (RMF) documentation.…See more Requires Security+ certification, bachelor's degree in computer science or cybersecurity, or equivalent experience.

A pre-sales architect who drives security opportunities from identification through delivery, working closely with clients to understand their security concerns and design tailored cyber security solutions. The role combines sales engineering, solution architecture, and technical advisory—qualifying opportunities, building reference architectures, delivering technical presentations and demos, and acting as a trusted consultant to optimize clients' security strategies.…See more Requires deep knowledge of security tools (vulnerability management, threat detection, IAM, infrastructure, cloud), ability to manage proposals and pipeline, and capacity to mentor team members and provide thought leadership.

The Windows Platform Engineer will administer, secure, and maintain enterprise Windows Server environments (2016, 2019, 2022) across a large-scale Department of Defense network. Responsibilities include patching, vulnerability remediation, STIG compliance, IAVA remediation, and full infrastructure lifecycle management (installation, configuration, monitoring, upgrades, decommissioning).…See more The role requires 2–5 years of Windows Server and enterprise systems administration experience, an active Secret clearance, and current Security+ certification.

This role focuses on integrating unmanned systems and sensors into the Minotaur C4I platform and related targeting software. You'll develop and maintain CI/CD pipelines, implement security compliance (STIGs, ATO, CDS), author technical documentation and SOPs, and serve as the technical liaison across NSW commands and industry partners.…See more The position requires strong proficiency in virtualization (Docker, Kubernetes, Linux), hands-on experience with mission-command software (Minotaur, Compass, uADSI), and demonstrated ability to troubleshoot complex systems and train operators. Regular travel within CONUS is required for training, testing, and coordination.

Principal Security Engineer (ISSM) responsible for overseeing information security program implementation, managing cybersecurity strategy, personnel, and infrastructure across Navy acquisition programs. The role involves assessing cyber posture, identifying and monitoring security vulnerabilities and risks, recognizing recurring trends across multiple programs, and translating findings into actionable remediation recommendations.…See more Requires 7+ years of cybersecurity/ISSM experience, a graduate degree in a related field, and current GSLC, CISSP, CISM, CAP, or CASP certification with active DoD Secret clearance and eligibility for Top Secret.

DevOps Systems Engineer supporting a U.S. Air Force cloud migration program, responsible for designing and maintaining secure, scalable on-premises and cloud infrastructure.…See more The role focuses on building and managing CI/CD pipelines, automating provisioning and configuration for legacy applications, implementing DevSecOps controls, and administering Linux/Windows servers. Requires 5+ years of system engineering and DevSecOps experience, active Secret clearance (Top Secret preferred), IAT II certification, and hands-on expertise with Kubernetes, Ansible, Jenkins, AWS, and containerization technologies.

ManTech seeks an Information System Security Officer to maintain Assessment & Authorization (A&A) documentation per NIST and DoD standards, track compliance deficiencies via Plans of Action and Milestones, implement continuous monitoring strategies, and oversee audit log systems and patch management. The role requires managing security tools, evaluating system configuration changes, and supporting an Information System Security Manager (ISSM) with compliance and incident response procedures.…See more Candidates must hold Security+ certification, have 2+ years of RMF and NIST SP 800-53 experience, and possess an active Top Secret clearance with SCI eligibility.

DevSecOps Engineer supporting a U.S. Air Force cloud migration program.…See more Responsibilities include designing secure on-premises infrastructure, building and managing CI/CD pipelines, automating provisioning and monitoring, implementing security controls, and troubleshooting infrastructure incidents. Requires active TS/SCI clearance, 5–8+ years of DevSecOps/software engineering experience, IAT II certification, hands-on expertise with Kubernetes, Docker, GitLab, AWS, Linux/Unix, and monitoring tools (ELK Stack, Nagios).

Design, build, test, and operate production ML and LLM-powered components for cybersecurity applications at scale. You will turn ambiguous requirements into working code, partner across product and security teams, and apply AI safety and guardrail practices.…See more The role requires solid software engineering fundamentals, hands-on experience building production ML/LLM applications (RAG, embeddings, agents), and the ability to take prototypes to reliable, maintainable systems. You'll work with distributed systems, cloud-native technologies, and graph/data plumbing while contributing to code reviews and raising team quality standards.

Design and develop operational software applications supporting Qualcomm's Product Security Team, implementing security development lifecycle frameworks and workflows. Work across diverse technology teams to translate security requirements into production systems, with focus on vulnerability management, debugging complex issues, and resolving production security incidents.…See more Requires 2+ years of development experience in languages like C#, .NET Core, Python, or Java, plus strong software security fundamentals and Linux administration or development skills.

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

The Cybersecurity Analyst leads Bumble Bee's day-to-day cybersecurity operations, investigating and responding to security incidents, hunting threats, and tuning detection tooling. The role owns the full incident response lifecycle, manages vulnerability remediation, optimizes SIEM platforms, conducts security risk assessments for platforms and vendors, and maintains compliance through access control reviews and policy development.…See more The analyst builds incident response playbooks, monitors threat intelligence and CVE disclosures, and advises on third-party cyber risk. The position requires 4+ years of cybersecurity experience, proficiency with SIEM platforms, EDR tools, vulnerability management, MITRE ATT&CK framework, and knowledge of NIST, SOC, and ISO standards.

The Information Security Analyst II will protect both operational technology (OT) and information technology (IT) environments at a pharmaceutical manufacturer. Responsibilities include securing industrial control systems, SCADA platforms, PLC-based automation, manufacturing execution systems, and enterprise endpoints; managing OT asset inventory and vulnerability remediation; implementing security controls and hardening standards; and supporting threat detection, incident response, and security assessments.…See more The role requires 3+ years in information security or system administration with direct OT/ICS/SCADA/manufacturing experience, working knowledge of Purdue Enterprise Reference Architecture and relevant standards (ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0), and hands-on experience with endpoint security, vulnerability management, and Windows/Active Directory administration.

As a Security Engineer II on Deloitte's Cyber Defense & Resilience CTEM team, you'll support clients in identifying, prioritizing, and remediating security exposures across complex infrastructure, middleware, and applications. You'll execute vulnerability and patch management tasks, analyze exposure data and attack paths to guide remediation priorities, and prepare client-facing dashboards and status reports.…See more The role requires 3+ years in IT security or vulnerability/patch management, hands-on experience remediating vulnerabilities across Linux, Windows, and applications, and proficiency with patch management tools (BigFix, MECM, Red Hat Satellite, WSUS, Tenable, Rapid7, Qualys) and scripting/automation languages (PowerShell, Bash, Python, Ansible, Terraform, JSON). You'll also coordinate remediation activities via ServiceNow or similar ITSM platforms and travel up to 50%.

This role combines systems engineering with DevOps and cybersecurity responsibilities. The engineer will develop requirements traceability, support system integration across applications and infrastructure, and provide continuous software sustainment for production systems.…See more Key duties include administering Linux and Windows servers, deploying and maintaining virtualized environments (VMware vSphere, AWS), managing vulnerabilities and DISA STIG compliance, executing zero-downtime deployments, and coordinating incident response. The role requires 3+ years of systems engineering experience in Agile defense environments and 2+ years of recent enterprise server administration.

As an Information System Security Manager, you will oversee cybersecurity and operations of multiple classified systems, managing personnel and developing enterprise-wide RMF-based information security policies, standards, and procedures. You will maintain compliance with federal and DoD security standards, create and maintain System Security Plans, conduct continuous monitoring, perform risk assessments, and investigate security incidents.…See more You will coordinate with ISSEs, ISAs, and other security roles to design, procure, build, and accredit complex networks and systems across multiple classification levels. Required: Bachelor's degree in Information Security/IT or equivalent with 10+ years experience, DoD 8570.01-M IAM level III certification (CISSP, CISM, GSLC, or CCISO), RMF and NIST 800-53 expertise, and an active TS/SCI clearance.