vulnerability-scanning jobs in San Diego

An Associate Cybersecurity Engineer will monitor security alerts from SIEM, EDR, and IDS/IPS tools to detect and triage security incidents, then investigate confirmed events and support containment and recovery efforts. The role includes threat analysis, vulnerability validation, security awareness training administration, and phishing simulation campaign execution.…See more The engineer will document investigations, maintain runbooks and playbooks, and collaborate with Security, IT, and DevOps teams while supporting compliance frameworks (SOC 2, ISO 27001, PCI DSS).

This IT Security Engineer Intern role involves assessing software solutions for security vulnerabilities, providing feedback to developers on secure coding practices, and supporting deployment through secure DevSecOps pipelines. The intern will work with mission-focused engineers on DoD defense projects, gathering requirements, developing test plans, and integrating security scanning tools (SAST/DAST) into CI/CD workflows.…See more Required skills include application development in Java or C++ on Linux/Windows, familiarity with networking protocols, and understanding of OWASP Top 10 risks and DISA STIGs. The role emphasizes collaboration with software, systems, and integration engineers to deliver robust, cyber-secure technical solutions.

Serve as an independent, third-party cybersecurity assessor and RMF (Risk Management Framework) team lead for Navy systems under the NSWC Corona CCAM contract. Execute comprehensive security assessments of IT, PIT, and OT systems against DoD and NAVSEA standards; validate NIST 800-53 control implementations; analyze vulnerability data and STIG compliance; generate Security Assessment Reports and Risk Assessment Reports; and provide mentorship to ISSMs and ISSOs.…See more Requires NQV Level III certification, active TS/SCI clearance, seven years of cybersecurity experience with four years in RMF assessments, and DoD 8570 IAM Level II/III baseline certification.

Build and maintain CI/CD pipelines supporting containerized and VM-based deployments in secure DoD environments. Design automated build, test, and deployment workflows; integrate security and compliance checks; manage artifacts and versioning; and support DevSecOps practices across development and integration environments.…See more Work with developers and platform engineers to improve automation reliability and troubleshoot deployment issues.

Senior IT Systems Engineer leading a team of systems and network engineers to maintain Linux and Windows computing infrastructure supporting Naval tactical systems testing. Responsibilities include IT infrastructure assembly and troubleshooting, virtualization management (VMware/OpenShift), security compliance (DISA STIG, RMF), hardware evaluation and procurement, and on-site support for DoD/Navy labs.…See more Requires 7+ years IT infrastructure experience, networking fundamentals (TCP/IP, routing, switching, firewalls), and virtualization expertise; DoD/Naval systems background and Security+ or CCNA certification are preferred.

As a Staff DevSecOps Engineer, you will design, build, and automate security controls across Shield AI's AWS infrastructure, containerized workloads, and CI/CD systems. You'll implement hardened container images, integrate vulnerability and compliance scanning into software delivery pipelines, and manage secrets, identity, and access controls at scale.…See more Working with Cybersecurity, Infosec, and Build Engineering teams, you'll translate security requirements into repeatable, maintainable engineering controls that reduce risk without friction. At the Staff level, you'll define reusable security patterns and drive adoption of security engineering practices across multiple teams.

Cloud Engineer III will design, deploy, and sustain secure cloud solutions across AWS, Azure, and government cloud environments (GovCloud, Azure Government) for mission-critical defense applications. The role requires deep expertise in cloud architecture, distributed systems, Infrastructure as Code, CI/CD pipelines, DevSecOps, containerization (Docker, Kubernetes), and cloud-native patterns.…See more You will work across cross-functional teams including engineers, cybersecurity personnel, and government stakeholders to architect hybrid cloud, edge-to-cloud, and enterprise platform solutions meeting DoD compliance standards (Impact Levels, Zero Trust, RMF, STIGs). Responsibilities include automating infrastructure, configuring security controls, managing cloud networking and identity, and communicating technical decisions and risks to technical and executive audiences.

The IT Cybersecurity Specialist will architect and implement ServiceNow-specific security controls (RBAC, ACLs, Data Policies, Edge Encryption) aligned to DoD Zero Trust Strategy for the Blue UAS Cleared List platform. The role requires developing and maintaining System Security Plans and RMF artifacts, mapping ServiceNow configurations to NIST SP 800-53 and NIST SP 800-171/172 standards, and tracking POA&M to remediate vulnerabilities and maintain Authority to Operate.…See more The specialist will coordinate with Government IT Program Managers and Authorizing Officials, conduct continuous monitoring, provide Security Assessment Reports, and ensure personnel meet DoDM 8140.03 certification requirements. This position requires a bachelor's degree, five years of practical cybersecurity experience, active DoD security clearance, and demonstrated expertise securing ServiceNow instances in FedRAMP High and DoD IL4/IL5 environments.

The OT Security Engineer will conduct vulnerability assessments in industrial SCADA/ICS environments, using specialized tools like Nozomi, Claroty, and Tenable.ot to identify risks in PLCs, HMIs, and OT networks. Responsibilities include performing asset discovery, risk assessment, and security scanning, then providing remediation recommendations to engineering teams.…See more The role requires hands-on knowledge of OT network protocols, segmentation, firewalls, and industrial cybersecurity practices, with regular onsite collaboration with operational technology and engineering staff.

Computer Programmer III will design, develop, and deploy software in highly regulated DoD DevSecOps environments using modern Agile practices (Scrum, Kanban, SAFe) and contemporary architecture patterns (microservices, event-driven, serverless). The role requires hands-on coding in Python, Java, C, Go, or C++; proficiency with containerized deployment on Kubernetes and cloud platforms (AWS, Azure, GCP); and demonstrated expertise implementing security gates, vulnerability scanning, and compliance automation for denied/disrupted operational environments.…See more Candidates must have 5+ years software development experience, 2+ years applying DevSecOps in government/DoD settings, and proven ability to build resilient, offline-first architectures for bandwidth-constrained naval systems.

This is an Enterprise Architect role within Naval Information Warfare Systems Command responsible for designing, evaluating, and securing enterprise network architectures at an advanced proficiency level. The incumbent will conduct vulnerability scans and configuration analyses, integrate cybersecurity requirements across acquisition lifecycle phases, and oversee the security posture of large-scale DoD information systems.…See more The role requires a minimum of one year of specialized experience at the GS-12 equivalent level and mandates obtaining and maintaining DoDM 8140.03 Cyber Workforce qualifications.

This role manages continuous software sustainment and operational support for production systems in secure, multi-domain defense environments. You will perform tier 2/3 technical support, proactive vulnerability management, and technical debt remediation while executing zero-downtime deployments using Agile methodologies (Scrum, Kanban, SAFe).…See more You must maintain DISA STIG compliance, implement Risk Management Framework controls, and support Authority to Operate (ATO) activities. The position requires hands-on expertise with Linux and Windows Server administration, shell scripting (Bash/Python/Ansible), virtualization, SIEM/security monitoring, and DoD 8140 cyber workforce certifications.

Join an offensive security team to triage and analyze vulnerabilities from bug bounties, penetration tests, and responsible AI security programs. You'll assess severity, write detailed security reports, collaborate with product and security teams on remediation, and support penetration testing across web apps, APIs, mobile, desktop applications, and LLMs.…See more The role requires 3+ years in computer security with at least 2 years of offensive security experience, hands-on penetration testing and vulnerability scanning skills, deep knowledge of OWASP Top 10, and proficiency in Python or similar scripting languages.

Cloud Engineer II supporting DevSecOps pipeline implementation, CI/CD workflows, automated security scanning, container deployment, and secure software delivery. Will assist with cybersecurity compliance activities including RMF documentation, Zero Trust alignment, vulnerability remediation, and audit-ready technical artifacts.…See more Requires 9+ years experience (or 7+ with Master's, or 4+ with PhD/JD), active Secret clearance, and ability to obtain TS/SCI. Must coordinate across architects, engineers, developers, cybersecurity teams, and government stakeholders to track tasks, troubleshoot issues, and communicate technical decisions and risks.

This role combines offensive security expertise with vulnerability management for a financial software company. The engineer will triage and analyze bug bounty and vulnerability disclosure reports, reproduce vulnerabilities, develop technical findings, and communicate security risks to product and engineering teams.…See more The position requires 3+ years of cybersecurity experience with 2+ years in offensive security, hands-on penetration testing and vulnerability scanning skills, experience testing web/mobile/desktop applications or AI systems, and proficiency in Python or similar scripting languages.

This Systems Engineer II role focuses on DoD cybersecurity compliance, vulnerability remediation, and production software deployments in defense environments. The engineer will implement DISA STIG compliance, Risk Management Framework (RMF) standards, and maintain continuous security monitoring (SIEM, intrusion detection) across heterogeneous Linux and Windows server environments.…See more The role requires hands-on execution of zero-downtime deployment strategies, Agile/SAFe methodologies, and enterprise virtualization (VMware, AWS), with strong emphasis on Information Assurance and DoD 8140 cyber workforce standards.

As a Cloud Engineer II, you will support DevSecOps pipeline implementation including CI/CD workflows, automated security scanning, configuration management, and container deployment. You'll assist with cybersecurity and compliance activities such as RMF documentation, Zero Trust alignment, vulnerability remediation, and audit-ready technical artifacts.…See more You'll coordinate across architects, engineers, developers, cybersecurity teams, and program stakeholders to track tasks, troubleshoot issues, and communicate status and risks. The role requires 9+ years of experience (or equivalent with advanced degree), an active Secret clearance, and the ability to obtain TS/SCI.

Design and lead hybrid edge-to-cloud architectures integrating tactical edge, on-premises, and cloud environments across AWS GovCloud, Azure Government, and containerized platforms. Architect solutions compliant with DoD cloud standards (Impact Levels 4–6+), Zero Trust, RMF, and multi-classification security requirements.…See more Implement DevSecOps pipelines with CI/CD, Infrastructure as Code, automated security scanning, and secure deployment practices. Provide technical leadership to engineers, developers, cybersecurity personnel, and government stakeholders through architecture reviews, risk identification, and executive briefings.

Senior Principal System Administrator responsible for managing and maintaining a classified development and integration test environment, including Windows and Red Hat Enterprise Linux servers, VMware virtualization infrastructure, and network hardware. The role requires strong Linux and Windows Server administration expertise, cybersecurity compliance knowledge (DISA STIGs, Nessus, PKI), and experience supporting classified networks.…See more Responsibilities include patching workflows, ePO/McAfee integration, vulnerability scanning, system accreditation support, and maintaining DoD-mandated security posture; some after-hours support for maintenance and incident response required.

Software Engineer II supporting Navy METOC systems, responsible for maintaining and developing fielded software systems, firmware, and engineering development models. Duties include software maintenance, patch deployment automation, security compliance (DISA STIGs, C&A processes), vulnerability management, and system hardening.…See more Requires 3+ years software engineering experience, Navy tactical systems familiarity (preferably CANES), Windows/Linux administration, scripting (PowerShell, Bash, Python), and DoD 8570 IAT Level II or Security+ CE certification.

Software Engineer II supporting Navy METOC fielded systems, lab assets, and EDMs under a DoD in-service engineering program. Responsibilities include maintaining system software and firmware, developing automation scripts for patch deployments, performing software testing and validation, and assisting with security hardening, STIG compliance, and certification & accreditation (C&A) processes.…See more Requires 3+ years of software engineering experience, hands-on Windows/Linux system administration and scripting, familiarity with DISA STIGs and vulnerability scanning tools, and preferably prior Navy Tactical Systems or CANES environment experience.

Senior systems administrator responsible for managing installation, configuration, updates, monitoring, and troubleshooting of enterprise and tactical IT infrastructure. Lead security hardening efforts aligned with CMMC and DISA STIG standards, vulnerability remediation, backup/recovery procedures, and network infrastructure including routers, firewalls, and VPNs.…See more Provide technical leadership to teams of administrators and coordinate across cybersecurity, engineering, and program stakeholders. Support tactical data pipelines, containerized workloads, and edge server environments.

As a Senior Platform Engineer at ReflexAI, you will design and maintain multi-cloud infrastructure across GCP and AWS using Terraform, Kubernetes, and GitHub, while building golden paths and guardrails that improve developer velocity. You'll own observability and monitoring with Datadog, strengthen security posture through IAM and container security best practices, and establish compliance workflows for SOC 2, HIPAA, and other industry standards.…See more This is a hands-on role requiring 5–7+ years of DevOps/SRE/platform engineering experience, deep cloud expertise, and CI/CD pipeline proficiency. You'll work cross-functionally to reduce operational toil and support an AI-driven product serving crisis support, healthcare, and enterprise customers.

Tier 2 security operations center support role providing customer service and technical assistance for a government RDT&E network. Responsibilities include triaging security incidents, analyzing vulnerability scanner findings, assisting with STIG configuration and verification, and supporting endpoint security posture across networked systems.…See more Requires 1–3 years of IT service desk experience and an IAT Level II certification (Security+, CCNA-Security, GSEC, GICSP, or SSCP) plus Microsoft MCSA or equivalent.

Senior systems administrator responsible for providing technical guidance and coordination across infrastructure, security, and engineering teams in a mission-focused environment. Will mentor administrators and end users, document technical solutions, and lead issue resolution across Windows/Linux systems, virtualization, networking, and cloud platforms.…See more Requires extensive experience in enterprise/government IT infrastructure, system hardening, cybersecurity compliance (CMMC, DISA STIG), and strong communication with technical and non-technical stakeholders.