vulnerability-scanning jobs in San Diego

Information Systems Security Engineer II supporting DoD Ballistic Missile Defense C4I systems with cybersecurity engineering, vulnerability management, and Risk Management Framework activities. Responsibilities include implementing cybersecurity controls, conducting DISA STIG assessments, performing vulnerability scans with tools like ACAS and Nessus, managing patches, maintaining eMASS RMF artifacts, and coordinating remediation across Windows, Linux, Hyper-V, and network environments.…See more Must assess cybersecurity risk, document findings, and support system authorization while maintaining operational readiness in a DoD test, integration, and evaluation environment.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

As a Linux Systems Automation Engineer, you will engineer and deploy critical infrastructure across Red Hat Enterprise Linux (RHEL) platforms for a government client, supporting national defense missions. You will design enterprise-scale monitoring and automation solutions, develop Python scripts and Ansible configurations for automated provisioning and compliance, and manage virtualized environments (KVM, QEMU, Proxmox) and containerized workloads.…See more Key responsibilities include maintaining system security through STIG implementation and hardening, performing vulnerability scanning and remediation, and authoring technical documentation. You must have 5+ years of RHEL administration experience, 3+ years of Python automation expertise, security compliance knowledge, and a Secret clearance.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing vulnerability and compliance assessments using industry-standard tools like eMASS and ACAS. You'll troubleshoot complex security challenges, assess network and system threats, implement infrastructure controls, and communicate security risks to both technical and non-technical audiences.…See more The role requires 3+ years of experience leading Risk Management Framework (RMF) activities for DoD projects, vulnerability scanning, and security control implementation. You'll work closely with Navy missions to identify cyber risks, recommend solutions, and provide hands-on support using your knowledge of cybersecurity policy, networks, system infrastructure, and risk management.

Design, implement, and maintain secure DevSecOps automation frameworks across on-premise and cloud infrastructure, integrating security controls into CI/CD pipelines for application and configuration deployment. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, Python, and Bash across Windows, Linux, VMware, Azure, and hybrid environments.…See more Automate provisioning, patching, vulnerability remediation, and compliance checks aligned with FFIEC, NCUA, CIS, and NIST standards while partnering with Cybersecurity, Infrastructure, and Application Development teams. Support container/platform engineering, cloud identity governance, and promote DevSecOps and GitOps practices across technology teams.

Design, implement, and maintain secure DevSecOps automation frameworks and CI/CD pipelines across hybrid infrastructure, cloud, and application platforms. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, and Python to automate provisioning, configuration management, patching, and vulnerability remediation across Windows, Linux, VMware, and Azure environments.…See more Integrate security controls into deployment pipelines including vulnerability scanning, secrets detection, code scanning, and policy enforcement aligned with FFIEC, NCUA, CIS, and NIST standards. Partner across Infrastructure, Security, and Application Development teams to advance DevSecOps practices, container engineering, and secure cloud governance.

This is a hands-on product security role focused on threat modeling and cybersecurity risk management for medical devices and SaMD platforms. You'll conduct security risk assessments, build FDA submission documentation (510(k) files, risk management files, SBOMs), review security architecture, and maintain risk and vulnerability management plans.…See more The role requires 5+ years of cybersecurity or product security experience, with strong preference for FDA documentation and regulated medical device background, and working knowledge of NIST frameworks, OWASP, and secure SDLC practices.