San Diego, CA

Cybersecurity Jobs in San Diego, CA

40 jobs found

Include remote jobs

Today

Senior Engineer, Application Security

SHIELD AI San Diego, CA

San Diego, CA

Today

$120k - $190k/yr Full time Senior Application Security Ci/cd Security

Apply Now

Job Description

Shield AI is seeking a Senior Application Security Engineer to support its Hivemind Enterprise product from its cybersecurity engineering organization in San Diego, CA. This onsite role centers on applying application security policies, embedding automated scanning into CI/CD, and partnering closely with developers to drive issues to resolution. You will also help shape how the product is designed, using threat modeling and secure coding standards to improve security from the start.

What you’ll do

Join the cybersecurity engineering team as part of the Hivemind application security function to help define application security policies.
Deploy and configure scanning tools within CI/CD pipelines so security checks are executed as part of the software lifecycle.
Review scanning results and collaborate directly with developers to identify and fix security issues in code.
Work with the architecture team to address security early by designing secure-by-default software.
Perform threat modeling and validate designs align with the team’s secure coding standards.

What you bring

Bachelor’s degree with approximately 5+ years of relevant experience, or a Master’s degree with approximately 4+ years of relevant experience in cybersecurity, software engineering, or a closely related technical field.
Experience developing or testing cyber secure code.
Strong understanding of modern software engineering practices, including CI/CD, automated testing, configuration management, and software lifecycle processes.
Familiarity with threat modeling.
Experience with software analysis tools such as static analysis, dynamic analysis, dependency mapping, and CVE scanning (including related practices).
Comfort working in a Linux development environment.
Strong organizational, communication, and cross-functional collaboration skills.
Basic understanding of key cryptography concepts.

Technologies

CI/CD
static analysis
dynamic analysis
dependency mapping
CVE scanning
Linux
cryptography

Compensation and benefits

Salary range: USD 120,000 - 190,000 per year.
Bonus + Benefits + Equity (in addition to pay within the listed range).
Pay within range listed above plus a temporary benefits package (applicable after 60 days of employment).

Preferred qualifications

Previous experience on an application security team for a large, complex software product.
Experience as a DevSecOps engineer, especially in a GitLab environment.
Experience writing software or testing Python, C/C++, and/or Go.
Red-teaming experience.
Software reverse engineering skills.

View full job page →

1d ago

Cybersecurity Engineer

Korra Technology Group San Diego, CA

San Diego, CA

1d ago

$115k+/yr Full time Cloud Platforms Cybersecurity Tools Endpoint Security

Apply Now

Job Description

Korra Technology Group is seeking a hands-on Cybersecurity Engineer based in San Diego, CA to help protect systems, networks, and sensitive information. The role focuses on security engineering, monitoring, vulnerability management, incident response, and ongoing improvements in risk reduction through collaboration across IT, infrastructure, and development teams.

Key Responsibilities

Implement and maintain security controls across networks, endpoints, servers, cloud environments, and business applications.
Monitor SIEM alerts and system logs to detect suspicious activity, potential intrusions, and unusual access patterns.
Investigate security incidents by assessing scope, preserving evidence, coordinating containment and remediation, supporting recovery activities, and performing root-cause analysis.
Conduct vulnerability assessments, prioritize findings based on risk, and work with system owners to remediate weaknesses.
Configure and maintain firewalls, IDS/IPS, endpoint protection, email security, and other defensive technologies.
Review access permissions, authentication methods, SSO, and privileged accounts to enforce least-privilege access.
Review cloud platforms, including permissions, configurations, network rules, logging, and encryption, and support security testing and remediation.
Partner with development teams on application security, secure coding practices, dependency management, and security checks in CI/CD pipelines.
Support audits and compliance activities, and maintain incident playbooks, procedures, and reporting on vulnerabilities and remediation progress.
Contribute to security awareness efforts, including guidance on phishing, credential protection, and safe data handling.

Required Qualifications

Professional experience in cybersecurity, information security, security operations, or a related IT security role.
Understanding of network security, operating systems, access controls, authentication, and common attack methods.
Experience with security monitoring, log analysis, vulnerability assessment, or incident investigation.
Familiarity with security tools such as SIEM platforms (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike), firewalls, and vulnerability scanners (e.g., Nessus, Qualys, Tenable).
Knowledge of least privilege, defense in depth, encryption, and secure configuration.
Ability to interpret security findings and communicate risks and remediation steps to both technical and non-technical teams.

Technologies

SIEM platforms: Splunk, Sentinel
EDR: CrowdStrike
Firewalls, IDS/IPS
Vulnerability scanners: Nessus, Qualys, Tenable
SSO, CI/CD pipelines
Scripting: Python, PowerShell, Bash
Cloud: AWS, Microsoft Azure, Google Cloud

Preferred Qualifications

Cloud security experience on AWS, Microsoft Azure, or Google Cloud.
Scripting experience in Python, PowerShell, or Bash to automate security tasks.
Knowledge of NIST, CIS Controls, ISO 27001, SOC 2, or HIPAA.
Certifications such as CompTIA Security+, CySA+, CISSP, CEH, or a cloud security certification.
Experience with incident response exercises, penetration test remediation, threat modeling, or security audits.
A bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field, or equivalent practical experience.

Benefits

Health, dental, and vision insurance
401(k) with company match
Paid time off
Paid holidays
Health savings account
Life insurance
Parental leave
Professional development assistance
Referral program
Vision insurance
Dental insurance

Position Details

Location: San Diego, CA (onsite)
Employment type: Full-time
Schedule: Monday to Friday, standard business hours
Compensation: USD 115,000 per year

View full job page →

2d ago

Cybersecurity Engineer - DoD RMF & Authorization

Fuse Integration San Diego, CA

San Diego, CA

2d ago

$120k - $160k/yr Full time Ato/iatt Cybersecurity Tools Dod Rmf

Apply Now

Job Description

Fuse Integration is seeking a Cybersecurity Engineer to lead DoD RMF execution and build/manage authorization packages for secure communications networks supporting U.S. defense agencies.

Responsibilities

Lead and support execution of the Department of Defense (DoD) Risk Management Framework (RMF) across development, testing, authorization, and operational lifecycles.
Develop, maintain, and manage complete RMF authorization packages supporting Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and ongoing authorization activities.
Prepare and maintain System Security Plans (SSPs), security control implementation statements, Plans of Action and Milestones (POA&Ms), hardware and software inventories, system architecture documentation, and other required RMF artifacts.
Manage RMF authorization packages within Enterprise Mission Assurance Support Service (eMASS), ensuring security control documentation, assessment evidence, and supporting artifacts remain accurate, complete, and current.
Analyze and document security control implementations aligned to NIST SP 800-53, DoDI 8510.01, CNSSI 1253, applicable DISA Security Technical Implementation Guides (STIGs), and DoD cybersecurity policies.
Coordinate with ISSMs, ISSOs, SCAs, Authorizing Officials (AOs), and government representatives to support assessments and authorization decisions.
Evaluate system architectures, configurations, and operational environments to determine security control applicability, implementation approaches, and compliance requirements.
Review and interpret vulnerability assessment results from ACAS, Nessus, SCAP, and STIG compliance assessments to identify deficiencies, document risks, and recommend remediation.
Develop, maintain, and track POA&Ms, coordinating with engineering teams to resolve vulnerabilities, document mitigating factors, and support risk acceptance decisions.
Support Security Control Assessment (SCA) activities by preparing assessment evidence, responding to findings, coordinating technical demonstrations, and resolving documentation gaps.
Develop and execute continuous monitoring activities to maintain cybersecurity posture and authorization status of assigned information systems.
Assess proposed modifications, software updates, and configuration changes to determine security control impacts, authorization boundary effects, and ATO/IATT condition changes.
Partner with systems, software, and network engineers to ensure cybersecurity requirements are incorporated into system design, development, integration, and testing.
Provide technical guidance on secure configurations, operating system hardening, network security, virtualization, and vulnerability remediation to support DoD cybersecurity requirements.

Requirements

6–8 years of professional experience in DoD cybersecurity, information assurance, systems administration, network engineering, or related technical disciplines.
Demonstrated experience supporting DoD RMF authorization activities, including development and maintenance of ATO and/or IATT packages.
Hands-on experience creating and maintaining RMF documentation, including SSPs, security control implementation statements, POA&Ms, and supporting assessment artifacts.
Experience using eMASS to document security controls, manage authorization artifacts, track assessment findings, and maintain RMF packages.
Strong working knowledge of NIST SP 800-53, DoD RMF requirements, and security control implementation and assessment methodologies.
Experience interpreting DISA STIG requirements, vulnerability assessment results, and system security configurations to determine compliance and develop remediation recommendations.
Experience reviewing system configurations, network architectures, and security control implementations to support accurate RMF documentation.
Working knowledge of Linux and Windows, including administration, security hardening, access controls, and configuration management.
Familiarity with virtualized environments such as VMware, KVM, or Hyper-V and related cybersecurity considerations.
Understanding of networking fundamentals including TCP/IP, VLANs, subnets, firewalls, routing, network segmentation, and secure communications.
Ability to analyze cybersecurity findings, document technical risks, and communicate remediation requirements to engineering teams and government stakeholders.
Strong technical writing skills for clear, accurate, and technically defensible security documentation.
Ability to independently manage multiple RMF deliverables, coordinate across engineering disciplines, and meet program authorization milestones.
Ability to meet applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned work role.
U.S. citizenship.
Active Secret security clearance.

Technologies

Linux, Windows
VMware, KVM, Hyper-V
eMASS
ACAS, Nessus, SCAP
STIGs
TCP/IP, VLANs, firewalls
POA&Ms, System Security Plans (SSPs)
NIST SP 800-53
DoDI 8510.01
CNSSI 1253
DISA Security Technical Implementation Guides (STIGs)
DoD RMF, DoD 8140

Benefits

Medical, Dental, and Vision
Employee coverage is fully funded; a portion of dependents' coverage is funded as well
11 paid Federal Holidays
Paid Time Off (PTO)
40 hours of paid sick leave per year
401k with employer matching
Annual bonuses
Cell phone reimbursement: $100/month

Preferred Qualifications

Experience independently managing DoD RMF authorization packages from initial system categorization through authorization and continuous monitoring.
Experience supporting successful ATO/IATT submissions, security assessments, and authorization package reviews.
Familiarity with Navy, Marine Corps, or Air Force RMF authorization processes and service-specific requirements.
Experience supporting cybersecurity accreditation of Research, Development, Test, and Evaluation (RDT&E) systems, developmental systems, or operational DoD capabilities.
Experience coordinating directly with SCAs, AOs, government ISSMs, and other authorization stakeholders.
Experience performing security control inheritance analysis, developing system authorization boundaries, and identifying applicable overlays and control tailoring requirements.
Experience using ACAS, Nessus, SCAP, STIG Viewer, and other vulnerability assessment or compliance tools.
Experience with technical implementation of DISA STIGs and security hardening of Linux, Windows, networking equipment, and virtualized environments.
Familiarity with DoDI 8510.01, NIST SP 800-37, CNSSI 1253, and applicable DoD continuous monitoring guidance.
Knowledge of Navy C4ISR systems, military networks, or tactical data links.
Experience supporting cybersecurity requirements within Agile software development or systems engineering environments.
Experience assessing cybersecurity risks associated with custom software, specialized hardware, or mission-specific system architectures.

Location: San Diego, CA (onsite)

Salary: USD 120,000 - 160,000 per yearly

Clearance: Active Secret

View full job page →

6d ago

Senior Game Application Security Analyst

PlayStation Global San Diego, CA

San Diego, CA

6d ago

$177k - $266k/yr Full time Senior Information Security Investigative Skills

Apply Now

Job Description

Protect fair, honest gameplay as part of the Game Security Team at PlayStation Global. In this Senior Product Security Analyst role, you investigate suspicious activity, partner with engineers and data scientists, and use game data and telemetry to build evidence that strengthens cheat detection. This onsite opportunity in San Diego, CA supports a team environment focused on shared objectives, with autonomy to move investigations and projects forward with minimal supervision.

What you will do

Run in-depth investigations using game data and telemetry to identify cheaters and support isolating them to maintain fair play.
Produce clear, detailed investigation reports where findings and recommendations are backed by specific data and evidence.
Partner with the team to prioritize, validate, and tune cheat detections based on investigation outcomes.
Collaborate as a valued team member, contributing to and supporting the team’s collective pursuit of shared goals.

What you bring

A solid track record as a tech-savvy investigator, skilled at uncovering information, tackling complex problems, and performing thorough monitoring of adversaries.
The versatility to collaborate effectively in a team setting, alongside the initiative to drive projects to completion with minimal supervision.
Proven ability to craft and present conclusive, data-driven reports that drive action and targeted outcomes.
Proficiency querying relational databases (for example, SQL) and working with big data services such as Redshift, Omni, Snowflake, or BigQuery.
Familiarity with the AAA Games Cheating/Security landscape and a passion for protecting player experiences.

Tools and technologies

SQL
Redshift, Omni, Snowflake, BigQuery
Tableau

Nice-to-have skills

Experience in game security, anti-cheat, or similar investigative work.
Experience using data visualization tools (for example, Tableau, Omni) to interpret and communicate insights.
Additional language proficiency such as Chinese, Korean, Russian, Japanese, or Spanish.

Salary range: USD 177,300 - 265,900 per year.

View full job page →

7d ago

Senior Cyber Security Analyst

TrellisWare Technologies San Diego, CA

San Diego, CA

7d ago

$120k - $150k/yr Full time Senior Data Security Facilities Management

Apply Now

Job Description

TrellisWare Technologies is hiring a Senior Cyber Security Analyst to help strengthen the organization’s cybersecurity program across governance and compliance. In this onsite role in San Diego, CA, you will work alongside IT and Engineering teams to define security requirements, validate control effectiveness, and ensure that policies, procedures, and evidence align with day-to-day operational reality in both cloud and on-premises environments.

Key Responsibilities

Provide governance oversight for cybersecurity operations, including vulnerability result validation and incident documentation.
Develop, maintain, and update security policies and procedures to align with regulatory and operational requirements.
Evaluate security controls, identify compliance gaps, and coordinate corrective actions with IT and Engineering to improve the organization’s risk posture.
Support audit readiness activities, including evidence validation, traceability, organization, and direct support during formal assessments.
Track audit findings and remediation progress through structured action plans and closure.
Participate in risk assessments and deliver risk-based recommendations to leadership.
Support access control governance, including least privilege and separation of duties.
Maintain accurate documentation that reflects system configurations, ownership, and control implementation.
Ensure policies, procedures, and evidence accurately reflect operational practices and implemented controls.
Coordinate with IT, Engineering, Program Management, and Security leadership to ensure security initiatives are executed effectively.
Review and validate vulnerability and configuration assessment results to ensure findings are accurate, risk ranked, and mapped to applicable compliance controls.
Leverage ISSM-aligned experience to support governance, audit preparation, and remediation tracking.
Support security awareness and training efforts aligned with organizational policies and procedures.
Perform other duties as assigned.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, or related field required.
Minimum of four (4) years of experience in a combination of risk management, information security, IT, and Cloud work.
CompTIA Security+ CE or ability to obtain within 6 months of start date.
Security qualifications are a bonus, including CISSP and CISM.
Demonstrated knowledge of RMF, NIST, NISPOM, system audits, vulnerability scanning, and DCSA security package development.
Experience working with NIST-based frameworks and supporting control implementation.
Working knowledge of security technologies sufficient to assess control effectiveness, interpret findings, and validate compliance evidence.
Ability to review, assess, and communicate vulnerability findings and remediation recommendations.
Strong collaboration and interpersonal skills.
Strong initiative, proactive work ethic, and prioritization skills.
Trustable judgment and analytical problem-solving skills.
Effective execution and decision making; champions change and promotes innovation.
Strong written and verbal communication skills.
Ability to obtain and maintain an active Secret Clearance, which requires U.S. citizenship.
Active or recent (within 2 years) Security Clearance is a plus.

Preferred Experience

Experience supporting CMMC readiness or formal audits.
Prior experience in an ISSM or equivalent security governance role.
Experience presenting risk, findings, or security posture to leadership.

Technologies

CompTIA Security+ CE
CISSP
CISM
RMF
NIST
NISPOM
DCSA security package

Compensation & Location

Location: San Diego, CA (onsite)
Pay range: USD 120,000 - 150,000 per year

Security Clearance and Screening Notes

Many TrellisWare positions require a security clearance or the ability to obtain one. Security clearances may be granted only to U.S. citizens. Applicants accepting a conditional offer of employment may be subject to government security investigations and must meet eligibility requirements for access to classified information.

Additional Disclosures

The information provided above is not intended to be an exhaustive list of responsibilities, duties, or skills required for the position. The company may change, assign, or reassign duties and responsibilities at any time. As part of onboarding, background checks may be conducted where legally permitted and appropriate for the role, in accordance with applicable laws, regulations, and privacy requirements.

View full job page →

7d ago

Cyber Security Engineer III

Scientific Research Corporation San Diego, CA

San Diego, CA

7d ago

$111k - $185k/yr Full time Cyber Security Engineer Cybersecurity Tools Engineer

Apply Now

Job Description

Scientific Research Corporation (SRC) is hiring a Cyber Security Engineer III for an onsite role supporting a Naval Information Warfare Center (NIWC) Pacific program.

Key Responsibilities

Perform information system security engineering activities tied to program needs
Capture and refine information security requirements and support their ongoing evolution
Ensure security requirements integration into IT components through purposeful design and configuration
Support security engineering work for LVC training and simulation environments

Required Qualifications

Bachelor’s degree in computer science, computer engineering, SW engineering, or cybersecurity
Eight (8) plus years of cybersecurity experience
IA Level I or higher certification from the approved list:
- A+CE
- CCNA-Security
- CND
- Network+CE
- SSCOP
NIA or NSA RMF cybersecurity experience

Preferred / Desired Skills

4+ years using Tenable Security Center and Nessus
4+ years working with SCAP compliance checker
Experience participating in system design reviews during the development lifecycle to incorporate and implement security control considerations in hardware and software development

Tools and Technologies

Tenable Security Center
Nessus
SCAP compliance checker
A+CE
CCNA-Security
CND
Network+CE
SSCOP

Travel Requirements

20% travel to perform security assessments

Clearance Information

U.S. citizenship required
U.S. Government security clearance at Top Secret / SCI level required

Benefits

Medical, dental, and vision plans
401(k) with a company match
Life insurance
Vacation and sick paid time off accruals, with amounts increasing based on role and years of service
11 paid holidays
Tuition reimbursement
Work environment that encourages excellence

Location: San Diego, CA (onsite) | Compensation: USD 111,100 - 185,100 per year | Experience: 8+ years

View full job page →

9d ago

BMET Cybersecurity Specialist

Sodexo San Diego, CA

San Diego, CA

9d ago

$82k - $106k/yr Full time Engineer Information Security Information Technology (IT)

Apply Now

Job Description

Sodexo is seeking a Clinical Engineering Cyber Specialist to lead medical device cybersecurity efforts for Sharp HealthCare in San Diego, CA.

Responsibilities

Implement cybersecurity controls, perform risk assessments, and partner with hospital IT and InfoSec teams to support the security and availability of medical devices.
Lead medical device cybersecurity work by managing CMMS data, collecting manufacturer security documentation, conducting risk assessments, and overseeing vulnerability remediation (patching, upgrades, and corrective actions).
Collaborate with hospital IT and vendors to support network segmentation, cybersecurity investigations, and device-related IT projects.
Monitor vulnerabilities, report remediation metrics, improve processes, and maintain CMMS data integrity.
Inspect, troubleshoot, repair, calibrate, and maintain medical equipment to support reliable patient care across clinical settings.
Perform routine inspections and preventative maintenance to minimize downtime and maintain compliance.
Uphold regulatory standards and support a safety-first environment, including audits and remediation efforts.
Maintain accurate service records, analyze data trends, and drive continuous improvement initiatives.
Work with clinical staff to resolve technical issues and support customer satisfaction.
Mentor and train team members to strengthen technical skills and service quality.

Requirements

3+ years of relevant experience in healthcare technology and/or IT cybersecurity supporting network-connected medical devices across hospital systems.
Experience with CMMS, asset management, vulnerability patching, and risk assessments.
Knowledge of HIPAA, Joint Commission, and NIST standards.
Skills in collaboration, technical investigations, cybersecurity training, and process improvement.
Maintains a valid driver’s license.
Prior BMET experience is highly beneficial.
Technical hands-on experience with medical equipment repair, calibration, and preventative maintenance.
Strong time management and organizational skills to prioritize tasks and coordinate service operations.
Customer-focused communication skills to build trust with clinical staff and team members.
Resourceful problem-solving skills for fast-paced, real-time environments.
Collaborative mindset with willingness to mentor and be mentored.
Education: Bachelor’s degree or equivalent experience.

Technologies

CMMS
Asset management
Vulnerability patching
Network segmentation
BMET
HIPAA
Joint Commission
NIST

Benefits

Medical, Dental, Vision Care and Wellness Programs
401(k) Plan with Matching Contributions
Paid Time Off and Company Holidays
Career Growth Opportunities and Tuition Reimbursement

Job Details

Location: San Diego, CA (onsite)
Compensation: USD 81,685 - 105,710 per year
Role type: Individual contributor; specialized technical tasks supporting operations
Work style: Primarily independent work with potential collaboration with a team

Compensation is fair and equitable and may be partially determined by education level and years of relevant experience. More extensive information is provided to new employees upon hire.