Top Cyber Security Jobs in San Diego, CA

Lead and scale the Email Security engineering team, own roadmap delivery, drive architecture for high-throughput distributed systems, partner with Product and Security, mentor engineers, and oversee on-call, incident response, and system reliability.

Assess and validate a high-volume Salesforce-to-AWS notification integration (S-Docs, VA Notify). Build and deploy integration components, implement DevSecOps (SAST/DAST/SCA), automate secrets/configuration, enable monitoring and error handling, and document architecture, risks, and compliance for federal ATO/RMF alignment.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Own and implement the platform's security and compliance posture (SOC 2, PCI, HIPAA). Design and automate controls and evidence pipelines, secure PII and tenant isolation across a multi-tenant platform, harden AI/LLM systems, partner with domains and CTO, and write production code to make compliance continuous and auditable.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Lead hands-on security engineer responsible for designing, implementing, hardening, automating, and optimizing enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Builds and maintains security platforms (SIEM, SOAR, XDR/EDR), develops detection logic, automates workflows, supports incident response, and partners with cross-functional teams to raise security engineering maturity and reduce risk.

Develop, implement, and maintain security policies and controls mapped to NIST CSF; manage policy and compliance workflows in ServiceNow IRM; perform risk assessments and gap analyses; support audit readiness and vendor assessments; produce dashboards and reports; lead security awareness and AI governance training; mentor junior analysts; collaborate with IT, risk, compliance, and business teams to drive remediation and policy adoption.

Support VA Health portfolio cybersecurity across projects: lead ATO/ATC activities, develop security/privacy artifacts, review controls against NIST SP 800-53, perform scans and remediation, update ServiceNow/CAM and GRC tools, prepare audit documentation, and coordinate with stakeholders to identify and mitigate risks while enabling agile application development and operations.

Sell IonQ's quantum-security solutions to SLED accounts by identifying and closing opportunities around quantum-safe encryption and post-quantum readiness. Manage full sales cycle, engage CISOs and IT leaders, collaborate with technical teams, maintain pipeline in CRM, and represent the company at industry events. Drive strategic, solution-oriented deals in complex, consultative environments.

Design, implement, and improve security architecture across AWS and Azure. Harden identity and privilege models, integrate CNAPP/CSPM and AppSec into SDLC, drive vulnerability and patch management, enable SIEM telemetry, implement IAM/PAM/least-privilege, and promote zero trust across engineering and product teams.

Lead cross-functional security initiatives: automate security tasks and incident response, manage HITRUST/SOC2/PCI assessments and remediation, evaluate and optimize security tools, secure software development (GitHub, code scanning, AI code), respond to audits, deliver training, and investigate and remediate security incidents to advance program maturity.

Lead end-to-end onboarding and enterprise deployments of Clearly AI, integrating with Jira, ServiceNow, Confluence, and GitHub. Configure review workflows, run structured project management, optimize threat modeling/privacy/vendor-risk processes, translate deployment friction into product improvements, triage support, and create onboarding documentation to drive production adoption and measurable security outcomes.

Lead multiple product security engineering teams to design, implement, and operate security controls across Allstate's technology ecosystem. Architect secure digital products, drive DevSecOps, CI/CD, cloud-native and application security best practices, integrate IAM/SIEM/vulnerability management, influence stakeholders, manage security product roadmaps, mentor engineers, and own production security KPIs and compliance.

Lead SAP security architecture and SOX ITGC activities across S/4HANA and cloud landscapes. Administer SAP GRC (ARM, EAM, UAR, BRM), design roles (PFCG, SU25), implement SoD monitoring, support upgrades/migrations, run audit readiness and evidence packages, automate UARs, train teams, and collaborate with Basis, functional, audit, and business stakeholders.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Customer-facing presales role designing and demonstrating SASE and Zero Trust architectures. Lead technical discovery, deliver demos/POCs/workshops, respond to RFPs/RFIs, integrate HPE+Juniper security solutions, present to technical and executive stakeholders, and provide field feedback to influence product roadmap. Regional travel required.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Serve as a technical security consultant advising enterprise customers on secure adoption of AI-powered cloud services. Lead architecture discussions, design AI security strategies, conduct security reviews and audits, translate complex architectures for technical and executive audiences, and guide remediation of vulnerabilities. Partner with product, engineering, legal, and compliance teams to align security guidance and build long-term customer trust.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Join the security team to run security operations, monitoring, incident response, application and infrastructure security reviews, bug bounty management, and compliance (SOC 2, ISO 27001, GDPR). Participate in on-call rotations, triage alerts, remediate vulnerabilities (libraries, images, containers), threat model systems, and integrate defensive tooling to protect SaaS and on-prem deployments.

Design and implement software security solutions for diabetes care and digital health products. Lead product security risk assessments, vulnerability remediation, secure coding practices, static analysis, and incident response. Mentor engineers, run security reviews, and ensure compliance with regulated medical software development and quality management systems.

Manage and lead engineering teams building endpoint security software: define and execute roadmaps, oversee SDLC and ISMS compliance, remove blockers, drive secure coding, coordinate with product and architects, recruit and develop staff, and manage budgets and operations.

Build and maintain data pipelines, metrics, and dashboards to quantify consumer product security risk. Perform hands-on analytics into device and authentication signals, shape risk measurement strategy, partner with product and security teams, and influence leadership reporting. Drive a unified, scalable data foundation that enables cross-team alignment and proactive risk detection.