ZipRecruiter

Log In

1

Cybersecurity Risk Management Jobs in California

ENSCO, Inc.

Cyber Security Engineer

El Segundo, CA · On-site

Some of the job responsibilities include but are not limited to: - Perform systems engineering activities in the areas of cybersecurity, Risk Management Framework (RMF) Assessment & Authorization (A ...

KBR, Inc.

Cyber Security Engineer

El Segundo, CA · On-site

Title: Cyber Security Engineer Belong. Connect. Grow. with KBR! KBR's National Security Solutions ... Apply risk management concepts to mitigate vulnerabilities in system security architectures

KBR

Cyber Security Engineer

El Segundo, CA

Title: Cyber Security Engineer Belong. Connect. Grow. with KBR! KBR's National Security Solutions ... Apply risk management concepts to mitigate vulnerabilities in system security architectures

Intuitive

Product Security Engineer

Sunnyvale, CA · On-site

Risk Management (20%) * Ensure that product cybersecurity risk meets product risk acceptance objectives. * Provide product cybersecurity risk management guidance and expertise to projects, peers or ...

next page

Showing results 1-20

All JobsCybersecurity Risk Management JobsCybersecurity Risk Management Jobs in California

Cybersecurity Risk Management information

See California salary details

$56.3K

$131.2K

$183.6K

How much do cybersecurity risk management jobs pay per year?

As of Jun 9, 2026, the average yearly pay for cybersecurity risk management in California is $131,221.00, according to ZipRecruiter salary data. Most workers in this role earn between $109,500.00 and $148,000.00 per year, depending on experience, location, and employer.

What are some common challenges faced by professionals in Cybersecurity Risk Management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What are the key skills and qualifications needed to thrive in Cybersecurity Risk Management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.
What are popular job titles related to Cybersecurity Risk Management jobs in California? For Cybersecurity Risk Management jobs in California, the most frequently searched job titles are:
What job categories do people searching Cybersecurity Risk Management jobs in California look for? The top searched job categories for Cybersecurity Risk Management jobs in California are:
What cities in California are hiring for Cybersecurity Risk Management jobs? Cities in California with the most Cybersecurity Risk Management job openings:
Cybersecurity Risk Management jobs near you
Infographic showing various Cybersecurity Risk Management job openings in California as of June 2026, with employment types broken down into 98% Full Time, 1% Temporary, and 1% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $131,221 per year, or $63.1 per hour.
Cyber Security Engineer

Cyber Security Engineer

ENSCO, Inc.

El Segundo, CA • On-site

Other

This job post has expired 1 day ago. Applications are no longer accepted.

Job description

ENSCO Inc is a diverse engineering and technology company that provides engineering, science and advanced technology solutions that guarantee mission success, safety, and security to governments and private industries worldwide. 
We are seeking a Cyber Security Engineer. The candidate will join our Evolved Strategic Systems (ESS) program in El Segundo, CA. Due to security requirements, work is required to be on-site in a secure facility.
The MILSATCOM Systems Engineering, Integration, and Test (MSEIT) effort provides leading edge Systems Engineering & Integration (SE&I) for the US Space Force's Space Systems Center (SSC). We support the Space Force's acquisition of state of the art satellite communications systems, providing global secure, survivable, and protected communications for our nation's warfighters. We seek technical individuals who will thrive in a highly collaborative work environment of small teams, using the most modern tools and methodologies to tackle the challenges of integrating complex space and ground communications systems. This position is on-site at El Segundo, CA. Some of the job responsibilities include but are not limited to: 
- Perform systems engineering activities in the areas of cybersecurity, Risk Management Framework (RMF) Assessment & Authorization (A&A) in accordance with DoDI 8510.01
- Perform cryptographic System Security Engineering (SSE) in compliance with NSA requirements and regulations
- Define security requirements, architecture, and design for embedded and large-scale, distributed DoD space and ground control systems
- Apply risk management concepts to mitigate vulnerabilities in system security architectures
- Interface with the Space Force customer, system stakeholders, and external contractors to coordinate cybersecurity and cryptographic requirements and architecture flow down from the system level to individual elements of the system
- Support integration activities of cybersecurity for space and ground networks
- Participate and propose inputs for verification and validation of cybersecurity requirements
- Perform cybersecurity planning and scheduling for RMF and coordinate efforts to categorize and assign impact values for confidentiality, integrity, and availability of systems per CNSSI 1253 to produce a tailored set of RMF security controls per NIST 800-53
- Provide critical inputs to the Program Protection Plan and assist in identification of Critical Program Information (CPI)/Critical Components (CC)
- Provide critical inputs to Cybersecurity Strategies and assist government with milestone approvals

Qualifications Required:
- Bachelor's degree in technical field such as engineering, mathematics, physics, IA/Cybersecurity, or computer science
- 5+ years of work experience in System Engineering Architecture/Design
- 5+ years of work experience in Information Assurance (IA)/Cyber Security
- Provide cybersecurity inputs to the Test and Evaluation Master Plan (TEMP) and coordinate Cybersecurity Test and Evaluation (T&E) requirements/activities (e.g., CVI, ACD, CVPA, AA) with stakeholders
- Lead Mission Based Cybersecurity Risk Assessments (MBCRA) (e.g., MRAP-C, CTT) events and provide Mission Impact Analysis and recommendations to the program office
- Understanding of the discipline and practice of Systems Engineering throughout the system lifecycle phases of concept, development, production, use, support, and retirement
- Understanding of modern computing architectures including CI/CD, microservices, cloud, and container technologies
- Proficient with Microsoft Office products (Word, Excel, Powerpoint)
- Strong interpersonal, organizational, and teambuilding skills
- Strong writing and oral presentation skills; ability to write final-version deliverable technical documents and reports
- Background in software design
- ABILITY TO OBTAIN AND MAINTAIN A DOD SECRET SECURITY CLEARANCE IS REQUIRED FOR THIS POSITION FOR WHICH, YOU MUST BE A U.S. CITIZEN

Qualifications Desired:
- Master's degree in technical field, such as engineering, mathematics, physics, IA/Cybersecurity, or computer science
- Experience working on DoD programs
- Proficient understanding of RMF process
- Familiarity with Cybersecurity Requirements Independent Verification and Validation (IV&V)
- Familiarity with NIST 800-53 and CNSSI 1253 RMF Analysis and Accreditation
- Familiarity with Network Engineering
- Familiarity with Communications Systems
- Familiarity with Security Test and Evaluation (ST&E)
- Security certification (CISSP)
- Top Secret with SCI security clearance

Work Location Type: On-Site
Required Certifications: None
U.S. Citizenship Required: Yes
Security Clearance Required: Ability to Obtain
Employment Type: Regular Full-time
Background Check Type:  7 Year Pre-Employment
Drug Screen Required: None
Position Contingent Upon Contract Award: No

Apply