vulnerability-management jobs in San Diego

Systems Engineer II responsible for systems engineering activities including architectural oversight, requirements traceability, and system integration in secure defense environments, alongside continuous software sustainment and operational support. The role requires 3+ years of systems engineering and agile software sustainment experience, 2+ years of enterprise server administration for Linux and Windows (including virtualized environments like VMware and AWS), and demonstrated proficiency in DISA STIG compliance and continuous security monitoring.…See more The candidate will manage production deployments with zero or near-zero downtime, implement vulnerability management, and maintain systems in a defense software environment.

Design, build, and maintain secure enterprise data platforms supporting AI/ML workloads, with responsibility for database optimization, CI/CD automation, and DoD compliance. Mentor junior engineers and provide technical leadership on architecture decisions.…See more Implement security controls aligned with NIST 800-53, RMF, and DISA STIG standards throughout the platform lifecycle. Develop ETL/ELT pipelines, support data lakes and lakehouses, and evaluate emerging data technologies for mission fit.

As a Fullstack Software Engineer, you will design and build modern web applications and APIs for financial technology, working across ReactJS/TypeScript frontends and backend systems (Node.js, Java/Spring) that handle large-scale transactions with real-time processing. You'll own end-to-end features, implement secure and compliant systems with advanced security practices (CSP, encryption, vulnerability assessment), and optimize for performance and scalability.…See more The role requires 5+ years of software engineering experience with strong proficiency in React, modern JavaScript/TypeScript, backend frameworks, SQL/NoSQL databases, and testing frameworks (Jest, Cypress, Playwright). You'll collaborate with engineers, designers, and product managers in an agile environment, participate in code reviews, and mentor junior developers.

Lead a team of security engineers responsible for the operational effectiveness and innovation of security engineering controls across LPL Financial. Manage day-to-day operations and maintenance of critical security infrastructure including SIEM, EDR, DLP, vulnerability management, IAM systems, and network security appliances.…See more Drive continuous improvement initiatives, develop incident response playbooks, collaborate with engineering teams on security integration, and provide technical leadership and mentorship to junior engineers. Requires 10+ years in information security with at least 5 years in a security operations or engineering leadership role.

Senior Embedded Software Engineer responsible for developing complex real-time embedded systems for electroporation therapy delivery, including firmware, device drivers, middleware, embedded UI applications, and system-level software. The role requires 7+ years of embedded software development experience with modern C++, ARM Cortex-M processors, RTOS frameworks (ThreadX, FreeRTOS, etc.), and expertise in real-time control systems, closed-loop feedback, safety-critical software, and cybersecurity implementation.…See more Responsibilities span architecture design, hardware-software integration, verification and validation, CI/CD support, and cross-functional collaboration with electrical, mechanical, and regulatory teams. The candidate must demonstrate proficiency with embedded development tools, debugging hardware, IEC 62304/IEC 60601 compliance standards, and FDA cybersecurity guidance.

This role combines offensive security expertise with vulnerability management for a financial software company. The engineer will triage and analyze bug bounty and vulnerability disclosure reports, reproduce vulnerabilities, develop technical findings, and communicate security risks to product and engineering teams.…See more The position requires 3+ years of cybersecurity experience with 2+ years in offensive security, hands-on penetration testing and vulnerability scanning skills, experience testing web/mobile/desktop applications or AI systems, and proficiency in Python or similar scripting languages.

As a Cloud Engineer II, you will support DevSecOps pipeline implementation including CI/CD workflows, automated security scanning, configuration management, and container deployment. You'll assist with cybersecurity and compliance activities such as RMF documentation, Zero Trust alignment, vulnerability remediation, and audit-ready technical artifacts.…See more You'll coordinate across architects, engineers, developers, cybersecurity teams, and program stakeholders to track tasks, troubleshoot issues, and communicate status and risks. The role requires 9+ years of experience (or equivalent with advanced degree), an active Secret clearance, and the ability to obtain TS/SCI.

Senior IT Systems Administrator responsible for implementing, maintaining, and supporting enterprise IT infrastructure across Windows Server and Linux environments. Key duties include administering Active Directory, managing virtualization platforms (VMware vSphere/Horizon), supporting hybrid cloud and Microsoft Entra ID deployments, and developing automation scripts in PowerShell, Bash, or Python.…See more The role requires strong troubleshooting skills, security best practices implementation, and collaboration with IT teams on infrastructure, compliance, and incident response.

Software Engineer I will develop and maintain secure, scalable software applications using Python and JavaScript in DoD classified and unclassified environments, implementing DevSecOps practices, CI/CD pipelines, and DISA STIG compliance. The role requires leading secure software development with embedded cybersecurity controls, designing modern web interfaces and APIs (REST, SOAP, GraphQL), and managing database architectures.…See more Candidates must hold an active Secret clearance, a Bachelor's degree with 4+ years of IT/software engineering experience, and IAT II certification (CySA+, Security+, CCNA-Security, GSEC, or SSCP). The position emphasizes Agile/Scrum methodologies, containerization (Docker, Kubernetes), object-oriented design, and cross-functional collaboration within a DoD environment.

The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include analyzing cybersecurity directives and policies (CTOs, FRAGOs, IAVMs, STIG requirements), developing compliance strategies aligned with federal and defense security standards, and performing risk analysis and independent verification of security configurations.…See more The role requires in-depth Risk Management Framework knowledge, FISMA data reporting support, and use of compliance tracking tools such as VRAM. This position requires a Secret clearance, IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), and 10+ years of cybersecurity or incident response experience.

Systems Engineer – Level II supporting systems engineering and continuous software sustainment in secure, mission-critical environments. The role encompasses architectural oversight, requirements traceability, system integration, operational support, vulnerability management, and technical-debt remediation across live production Linux and Windows enterprise infrastructure.…See more Requires 3+ years of systems engineering with Agile methodologies and 2+ years of recent enterprise server administration including VMware vSphere and AWS virtualized environments, with mandatory DISA STIG compliance expertise.

Staff-level AWS cloud security engineer responsible for designing, implementing, and enhancing security controls across AWS environments. The role involves monitoring and responding to security threats, conducting assessments, developing security standards and policies, and supporting AI/ML platforms and data pipelines.…See more Requires 8+ years of cybersecurity experience, 3+ years hands-on AWS security expertise, and an AWS Security certification, with strong knowledge of IAM, CloudTrail, Security Hub, GuardDuty, KMS, and VPC.

The ISSE will own an assigned eMASS package and drive interim authorization processes for a Navy client, ensuring RMF compliance and DoD cybersecurity guidance adherence. Key responsibilities include conducting STIG assessments, coordinating remediation activities, developing and maintaining POA&Ms, and supporting Microsoft 365 DDIL security testing.…See more The role requires a Bachelor's degree in Computer Science or related field, 3–5 years of RMF/cybersecurity accreditation experience, and a current DoD 8140 Level II certification (CISSP, CISM, CASP+, or CGRC). An active SECRET clearance is mandatory.

The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establishing governance frameworks aligned with industry standards like NIST, ISO, and SOC 2. The role requires leading threat detection, incident response, digital forensics, and vulnerability management while protecting client confidentiality and attorney-client privilege through robust technical and procedural controls.…See more The candidate must ensure secure architecture across cloud, on-premise, and hybrid environments and drive compliance with data protection and privacy regulations including GDPR, CCPA, and HIPAA. This is a senior executive position requiring 8+ years of cybersecurity experience and 6+ years in a senior leadership role managing global security programs.

The Cybersecurity Analyst owns Bumble Bee's day-to-day security operations, investigating and responding to incidents, hunting threats, and tuning detection tooling to close coverage gaps. Responsibilities include managing the full incident response lifecycle, optimizing SIEM platforms, conducting vulnerability assessments, performing access control audits, and building incident response playbooks and procedures.…See more The role requires 4+ years of cybersecurity experience, proficiency with SIEM platforms, EDR tools, vulnerability management platforms, and hands-on knowledge of Windows/Linux, networking, and the MITRE ATT&CK framework. Success demands both technical operations expertise and cross-functional collaboration to strengthen security posture, ensure compliance, and assess third-party cyber risk.

Senior Systems Engineer responsible for planning and implementing security patches across enterprise Linux and Windows server environments in AWS, Azure, and hybrid infrastructure. Design and operate automation platforms (AWS Systems Manager, Ansible, SCCM/Intune) to scale vulnerability management and remediation across cloud and on-premises fleets.…See more Partner with security, infrastructure, network, and compliance teams on patch testing, deployment sequencing, rollback procedures, and audit-ready documentation in a regulated (GxP/SOX/21 CFR Part 11) environment.

This is a senior infrastructure and cybersecurity engineering role requiring 10+ years of experience designing, administering, and securing hybrid/cloud infrastructure across Linux, Windows Server, containerized, and private cloud environments. The engineer will implement security controls aligned with NIST SP 800-53, DISA STIGs, RMF, and Zero Trust principles, support DevSecOps pipelines and CI/CD automation, and use scripting, configuration management, and Infrastructure as Code to streamline builds, patching, hardening, and compliance.…See more The role demands collaboration across cybersecurity, software, infrastructure, and mission teams to troubleshoot complex issues, improve security practices, and communicate technical risks and recommendations.

Principal Systems Administrator role managing enterprise Windows Server and Linux environments, including Active Directory, virtualization (VMware/Horizon), cloud identity (Azure AD), and endpoint security. Requires 7+ years of systems administration experience, CompTIA Security+ certification or DoD 8570 IAT Level II equivalent, and ability to obtain a US Secret clearance.…See more The role combines hands-on administration with mentorship, technical documentation, and Tier 1–2 escalation support, including automation via PowerShell, Bash, or Python.

This role supports cybersecurity engineering and infrastructure security for enterprise, cloud, and classified environments. The engineer will manage vulnerability assessment, system hardening, patching, secure configuration, and DevSecOps pipeline integration across Linux and Windows Server platforms.…See more Responsibilities include compliance support (RMF, ATO, NIST SP 800-53, DISA STIGs), CI/CD security automation, containerized environment hardening, and infrastructure-as-code implementation. Strong technical depth in cloud platforms (AWS/AWS GovCloud), container orchestration, security tooling, and the ability to communicate complex technical and compliance issues to engineering and mission stakeholders are required.

This is a network engineering role focused on designing, implementing, troubleshooting, and sustaining tactical and enterprise network systems with a strong cybersecurity emphasis. The engineer will work with WAN-level architectures, routing, connectivity, and tactical data links while assessing cybersecurity risks across deployed systems and coordinating with cross-functional stakeholders.…See more The role requires deep experience in network architecture, cybersecurity policy, security controls, vulnerability management, and the ability to document and communicate technical risks and network designs to both engineering and operational audiences.

The Cybersecurity Analyst will support security compliance, assessment, monitoring, and remediation for a Federal information system. Responsibilities include implementing and validating security controls, collecting evidence for assessments and audits, maintaining security documentation, reviewing vulnerability scans, monitoring security alerts, and preparing status reports.…See more The role requires a minimum of five years of cybersecurity or information assurance experience, a bachelor's degree, and an active CompTIA Security+ certification or higher. The analyst will coordinate with technical and program personnel to ensure cybersecurity actions are completed on schedule.

This Cybersecurity Manager role owns vulnerability and exposure management, leads penetration testing, threat hunting, and threat intelligence programs. The position integrates AI and machine learning into security operations to enhance threat detection and anomaly identification, manages security tools and incident response, and ensures the security of AI/ML systems across the enterprise.…See more The candidate will develop automation scripts and SOAR workflows, conduct forensic investigations, and drive continuous improvement in the security posture. Required qualifications include 5+ years of cybersecurity experience, a relevant bachelor's degree, and an industry-recognized certification (Security+, SSCP, CCNP Security, CISSP, or equivalent).

Lead a team of security engineers responsible for deploying, integrating, optimizing, and managing enterprise cybersecurity platforms including SIEM (Splunk, Elasticsearch), XDR, EDR, email gateways, and vulnerability management across on-premises and cloud environments. Develop and execute cybersecurity tooling strategy aligned with business objectives, regulatory requirements (NIST CSF, ISO 27001, SOC 2, PCI-DSS), and industry best practices.…See more Automate threat detection, response, compliance reporting, and operational workflows using Python, PowerShell, and Bash. Mentor security engineering teams while managing budgets, cross-functional partnerships, and executive reporting on security posture and tooling effectiveness.

The IT Cybersecurity Specialist will architect and implement ServiceNow security controls aligned with DoD cybersecurity requirements, including Role-Based Access Controls, Data Policies, and Edge Encryption. The role requires developing and maintaining RMF/ATO documentation, mapping configurations to NIST SP 800-53/800-171/172 and DoD IL4/IL5 controls, and managing Plans of Action and Milestones for vulnerability remediation.…See more The candidate will conduct continuous monitoring activities, compliance checks, and security assessments to maintain the Blue List platform's Authority to Operate and ensure alignment with DoD Zero Trust Strategy and CUI protection requirements.

The Cybersecurity Engineer II will design, engineer, and deploy cybersecurity and network defense solutions across complex DoD environments, with hands-on responsibility for SIEM, IDS/IPS, firewalls, and vulnerability management platforms. The role involves configuring Splunk Enterprise, conducting network and security analysis with tools like Wireshark and Tenable, and leveraging automation and APIs to improve security operations.…See more The engineer will support DoD Computer Network Defense requirements, integrate solutions across Windows, Linux, and network infrastructure, and collaborate with government and vendor teams throughout acquisition, testing, and deployment. The position requires 5–7+ years of hands-on cybersecurity and network defense experience, a Bachelor's degree in a related technical field, and an active U.S. national security clearance.