Top Senior Cyber Security Jobs in San Diego, CA

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Lead cybersecurity engineering for systems, ensuring compliance with RMF/NIST and security standards (STIG, OWASP, CIS). Perform vulnerability assessments, A&A support, risk analyses, implementation guidance, and vulnerability remediation using tools like Nessus, Nexpose, ACAS, and SAST/DAST. Coordinate stakeholders, document security posture, and obtain required special access and clearances.

Build and ship platform infrastructure focused on device identity and security: secure boot, disk encryption, device attestation, key management, certificate lifecycle, and cloud enrollment. Write production-quality backend and provisioning tooling, collaborate with firmware, cloud, and operations teams, learn from a senior mentor, and use AI-assisted development tools. Work on-site in San Diego to support fleet-scale provisioning, deployment, and device security at scale.

Manage RMF and A&A activities for Department of the Navy systems, conduct risk assessments and vulnerability analysis, develop authorization artifacts and cybersecurity documentation in eMASS and related tools, support continuous monitoring, configuration management, and remediation planning, and coordinate with program managers, engineers, ISSMs, and government stakeholders to achieve and maintain cybersecurity compliance and accreditation.

Lead and own the organization's IT and information security program, ensuring HIPAA/HITECH compliance. Manage infrastructure, cloud security, identity, endpoint protection, incident response, vendor risk, audits, disaster recovery, and staff. Develop policies, perform risk assessments, and advise executives to maintain secure, resilient systems and regulatory compliance.

Protect and monitor university systems by installing, configuring, and maintaining security tools; conduct risk and vulnerability assessments; support incident detection, investigation, and remediation; contribute to security policies, awareness training, vendor security reviews, and documentation; research emerging threats and recommend security improvements.

Lead design and implementation of a secure software supply chain and high-assurance CI/CD platform. Secure build and deployment environments, enforce artifact signing, provenance and SBOM generation, target SLSA 3/4 and NIST SSDF compliance, integrate AI governance and agentic controls into pipelines, and grow/mentor the security team.

Lead application security and DevSecOps across product, cloud, and enterprise systems. Implement secure SDLC practices (threat modeling, code reviews, SAST/DAST/SCA), own software supply-chain security (SCA, SBOMs, signing), govern secrets and application controls, harden self-hosted deployments across AWS/Azure/on-prem, and embed scalable security tooling with engineering teams.

Lead detection and response across endpoint, cloud, identity, network, and SaaS telemetry. Own complex investigations and incident response end-to-end, tune detections, perform threat hunts, develop playbooks/runbooks, mentor analysts, and coordinate cross-team during incidents to reduce dwell time.

Perform vulnerability assessments, penetration testing, threat modeling, reverse engineering, and incident response for software-defined radio products. Ensure compliance with FIPS 140 and NIST STIG, implement secure key management/COMSEC processes, and document product security. Collaborate with engineering teams and build customer trust.

Own end-to-end network security across enterprise, on‑prem, cloud, and vessel communications. Design firewalls, segmentation, VPN/ZTNA, AWS VPC controls, and cryptographic key management for constrained maritime links. Improve observability (flow logs, telemetry), support a NOC, and automate segmentation/configuration via scripting and infrastructure-as-code.

Senior SAP Security/GRC administrator to manage and troubleshoot SAP GRC (Access/Process Control), design and maintain roles/authorizations across ABAP/Java and S/4HANA, remediate SoD conflicts, support audits, configure BRF+/MSMP workflows and integrations (HANA, LDAP, BRM), enable SSO, produce reports/documentation, and provide second-level support for projects and compliance.

Provide technical and functional security support for Oracle Fusion Cloud and related applications. Manage access provisioning/deprovisioning, troubleshoot roles and data security issues, maintain role and service-account documentation, support BI permissions, assist projects and consultants, and ensure SOX compliance for Oracle access controls.