vulnerability-scanning jobs in San Diego

Cloud Engineer III responsible for designing, deploying, and sustaining secure cloud solutions across AWS, Azure, AWS GovCloud, and Azure Government environments. The role requires expertise in cloud architecture, Infrastructure as Code, DevSecOps, containerization, and Kubernetes, with a focus on mission-critical defense applications.…See more Candidates must demonstrate strong cloud networking, identity, storage, compute, and security capabilities, and communicate technical decisions to cross-functional teams including engineers, operators, cybersecurity personnel, and government stakeholders.

The Information System Security Officer (ISSO) serves as a steward of classified and high-side information systems, ensuring security compliance and operational resilience in accordance with DoD and DCSA standards. The role involves executing Risk Management Framework (RMF) activities, pursuing Authorization to Operate (ATO) via eMASS, conducting vulnerability scanning with tools like Nessus, and maintaining compliance with NISP and federal requirements.…See more Responsibilities include hands-on system administration, security monitoring, patch management, data transfer operations, and collaborative work with industrial security teams to integrate technical and administrative controls. Success requires proven experience processing ATO packages, system administration skills, security compliance knowledge, and the ability to balance rigorous security controls with operational effectiveness.

Design and implement security strategies for Abbott's cloud-based applications and medical devices, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Leverage AI-assisted development tools and cybersecurity platforms to automate vulnerability analysis, evidence collection, and remediation tracking. Conduct hands-on web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools, with demonstrated experience in product security and medical device environments preferred.

The IT Cybersecurity Specialist will architect and implement ServiceNow security controls aligned with DoD cybersecurity requirements, including Role-Based Access Controls, Data Policies, and Edge Encryption. The role requires developing and maintaining RMF/ATO documentation, mapping configurations to NIST SP 800-53/800-171/172 and DoD IL4/IL5 controls, and managing Plans of Action and Milestones for vulnerability remediation.…See more The candidate will conduct continuous monitoring activities, compliance checks, and security assessments to maintain the Blue List platform's Authority to Operate and ensure alignment with DoD Zero Trust Strategy and CUI protection requirements.

Information Systems Security Engineer II supporting DoD Ballistic Missile Defense C4I systems with cybersecurity engineering, vulnerability management, and Risk Management Framework activities. Responsibilities include implementing cybersecurity controls, conducting DISA STIG assessments, performing vulnerability scans with tools like ACAS and Nessus, managing patches, maintaining eMASS RMF artifacts, and coordinating remediation across Windows, Linux, Hyper-V, and network environments.…See more Must assess cybersecurity risk, document findings, and support system authorization while maintaining operational readiness in a DoD test, integration, and evaluation environment.

This cybersecurity engineer role focuses on securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications through vulnerability management, risk assessment, and security architecture review. The position requires hands-on experience with SIEM, EDR, WAF configuration, and embedding security scanning (SAST, DAST, SCA) into CI/CD pipelines.…See more The engineer will conduct threat modeling, manage IAM policies, perform penetration testing coordination, support incident response and post-incident reviews, and partner with engineering teams to balance security with delivery. The role also includes compliance support, vendor risk assessments, and serving in an on-call rotation for after-hours security incidents.

This role is a hands-on cybersecurity engineer responsible for securing cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and applications. Key duties include vulnerability scanning and penetration testing, threat modeling, Web Application Firewall (WAF) deployment and tuning, CI/CD security integration (SAST, DAST, SCA), incident response, and compliance support.…See more The engineer will work closely with DevOps and application teams to embed security controls, conduct code and architecture reviews, and provide risk-based guidance. Required experience includes 3–5+ years in cybersecurity or security engineering, hands-on SIEM/EDR/vulnerability management tools, cloud platforms, WAF configuration, and scripting (Python, Bash, PowerShell).

As a Linux Systems Automation Engineer, you will engineer and deploy critical infrastructure across Red Hat Enterprise Linux (RHEL) platforms for a government client, supporting national defense missions. You will design enterprise-scale monitoring and automation solutions, develop Python scripts and Ansible configurations for automated provisioning and compliance, and manage virtualized environments (KVM, QEMU, Proxmox) and containerized workloads.…See more Key responsibilities include maintaining system security through STIG implementation and hardening, performing vulnerability scanning and remediation, and authoring technical documentation. You must have 5+ years of RHEL administration experience, 3+ years of Python automation expertise, security compliance knowledge, and a Secret clearance.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing vulnerability and compliance assessments using industry-standard tools like eMASS and ACAS. You'll troubleshoot complex security challenges, assess network and system threats, implement infrastructure controls, and communicate security risks to both technical and non-technical audiences.…See more The role requires 3+ years of experience leading Risk Management Framework (RMF) activities for DoD projects, vulnerability scanning, and security control implementation. You'll work closely with Navy missions to identify cyber risks, recommend solutions, and provide hands-on support using your knowledge of cybersecurity policy, networks, system infrastructure, and risk management.

Design, implement, and maintain secure DevSecOps automation frameworks across on-premise and cloud infrastructure, integrating security controls into CI/CD pipelines for application and configuration deployment. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, Python, and Bash across Windows, Linux, VMware, Azure, and hybrid environments.…See more Automate provisioning, patching, vulnerability remediation, and compliance checks aligned with FFIEC, NCUA, CIS, and NIST standards while partnering with Cybersecurity, Infrastructure, and Application Development teams. Support container/platform engineering, cloud identity governance, and promote DevSecOps and GitOps practices across technology teams.

Design, implement, and maintain secure DevSecOps automation frameworks and CI/CD pipelines across hybrid infrastructure, cloud, and application platforms. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, and Python to automate provisioning, configuration management, patching, and vulnerability remediation across Windows, Linux, VMware, and Azure environments.…See more Integrate security controls into deployment pipelines including vulnerability scanning, secrets detection, code scanning, and policy enforcement aligned with FFIEC, NCUA, CIS, and NIST standards. Partner across Infrastructure, Security, and Application Development teams to advance DevSecOps practices, container engineering, and secure cloud governance.

This is a hands-on product security role focused on threat modeling and cybersecurity risk management for medical devices and SaMD platforms. You'll conduct security risk assessments, build FDA submission documentation (510(k) files, risk management files, SBOMs), review security architecture, and maintain risk and vulnerability management plans.…See more The role requires 5+ years of cybersecurity or product security experience, with strong preference for FDA documentation and regulated medical device background, and working knowledge of NIST frameworks, OWASP, and secure SDLC practices.