15 penetration testing jobs at 15 companies in San Francisco, CA
1w
Save
Mark Applied
Hide
1w
Senior IT Penetration Tester
United States or Oak Brook or Los Angeles or Washington or Troy or New York City or Houston or Chicago or Grand Rapids or Owings Mills or Columbia or Richmond or Memphis or Raleigh or Boston or San Jose or San Francisco or Austin or Kalamazoo or Spokane or Denver or Fort Worth or Atlanta or Orlando or Dallas or Wilmington or Phoenix or San Antonio or Milwaukee or Madison or McLean or Melville or Woodbridge or Stamford or Philadelphia or Charlotte or Greenville or West Palm Beach or Costa Mesa or St. Louis or Fort Lauderdale or Seattle or Pittsburgh or Tulsa or Cincinnati or Cleveland or Columbus or Akron or Cherry Hill or Tampa or Minneapolis or Anchorage or Salt Lake City or Norfolk or Jacksonville or Boulder or Nashville or Las Vegas or Indianapolis or San Diego or Potomac or Baton Rouge or Omaha
$120k-$160k/yrOnsiteFull Time
BDO USA: Provides accounting, tax, and business advisory services to organizations.
4+ YOEFour or more years of hands-on penetration testing experience, strong Windows, Linux, networking, Active Directory, scripting, reporting, client communication, and offensive security tooling skills; high school diploma required.
Kali Linux, Nessus, Tenable, Nmap, Burp Suite, Metasploit, BloodHound, Microsoft 365, OWASP Top 10 for LLM Applications, Python, PowerShell, Bash, Git, GitHub Actions, Azure DevOps, Docker, GitHub, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Splunk, Microsoft Sentinel, GitHub Copilot, Claude Code, Microsoft Azure, AWS, SAML, OAuth 2.0, OpenID Connect, Kerberos, NTLM, TCP/IP, DNS, Windows, Linux
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
4+ YOE4+ years professional software testing experience, 2+ years building test automation frameworks, proficiency in Java/C++/C#, penetration testing, and platform hardening for Linux and Windows.
Java, C++, C#, Selenium, Appium, React, Linux, Windows
Anthropic: Developing safe and reliable artificial intelligence systems.
Experience in penetration testing/red teaming, model jailbreaking, web application security, building custom automation and LLM-specific testing frameworks; strong communication skills and public body of work.
SandiskNasdaq: SNDK: Designs and manufactures flash memory and data storage products.
5+ YOE5–10+ years in cybersecurity engineering with expertise in attack surface management, penetration testing, vulnerability management, cloud security, scripting (Python/Bash/Go), and automation.
AWS, Azure, GCP, Python, Bash, Go, NIST CSF, NIST 800-82, ISO 27001, EDR/XDR, SIEM, SOAR, ASM, Claroty, Nozomi, Dragos, DevSecOps, CI/CD, Software Bill of Materials (SBOM), AI/ML
United States or San Francisco or New York City or London or Dublin or Tel Aviv or Sydney
$227k-$267k/yrRemoteFull Time
Vanta: Automated security compliance and trust management software for businesses.
Experience with threat modeling, penetration testing or red teaming, software development and reading code to find security issues, strong communication and project management, and independent ownership of security initiatives.
Delinea: Provides identity security and privileged access management software.
7+ YOE3+ Mgmt7+ years hands-on penetration testing experience, 3+ years leading offensive security teams; expertise in web/API/network testing, AD/Entra ID attacks, source review, and scripting; familiarity with compliance (SOC2, ISO27001, PCI, FedRAMP).
3+ YOEBachelor's degree or equivalent experience, 3+ years in offensive security or vulnerability research, experience with reverse engineering/fuzzing/exploit development, familiarity with penetration testing, strong OS/network/application security knowledge.
Large Language Models (LLMs), LLMs, Reinforcement Learning, RLHF, Supervised Fine-Tuning (SFT), AI agents, fuzzers
1X: Manufacturing safe, general-purpose humanoid robots for home and work.
5+ YOE5+ years in product/offensive security; strong Linux internals, penetration testing, cryptography/PKI, cloud/CI/CD security; proficiency in C/C++, Rust, Go or Python; bachelor’s in CS/InfoSec/Engineering or equivalent.
Cohere: Provides enterprise-grade large language models and AI software platforms.
8+ YOE8+ years in Application Security / Security Engineering; strong focus on vulnerability management, SDLC, and bug bounty; proficient in SAST, DAST, and penetration testing; programming in Python/GoLang; cloud experience (AWS/GCP/Azure); strong communication and leadership.
Lockheed MartinNYSE: LMT: Designs and manufactures advanced aerospace, defense, and security systems.
Requires Level II NDT certification in ultrasonic and radiography plus liquid penetrant or magnetic particle, U.S. citizenship, Secret clearance eligibility, and knowledge of NDT methods and processes.
GE Rhythm, YXLON F.GUI, Image 3500, NSI efX-CT, Microsoft Office, NDT inspection systems
QualysNASDAQ: QLYS: Provides cloud-based platform for cybersecurity and compliance management.
6+ YOE6+ years combined software/ML and security research or penetration testing experience; strong Python; experience with Scikit-learn, TensorFlow or PyTorch, LangChain/LlamaIndex, vector DBs (FAISS, Pinecone, Qdrant), cloud (AWS/GCP/Azure), SQL and Pandas.
Boston or Carmel or Chicago or Lambertville or New York City or San Francisco or United States
$60k-$80k/yrHybridFull Time
Real Chemistry: Provides marketing and communication services for healthcare companies.
5+ YOE5+ years cloud security experience (3+ in high-growth acceptable), including 2 years focused on application security; hands-on with AWS IAM, SAML/OIDC, GitHub security tooling, threat modeling, penetration testing, and familiarity with SOC 2/GDPR/HIPAA-adjacent controls.
Charlotte or San Francisco or Los Angeles or New York City
$140k-$170k/yrOnsiteFull Time
Scout Motors: Designs and manufactures all-electric rugged SUVs and trucks.
10+ YOEMaster's in EE/CE/CS with 10+ years experience; expertise in vehicle cybersecurity, ISO 26262, ISO/SAE 21434, UNECE R155/R156, ECU integration, CAN/Ethernet/LIN/FlexRay, UDS, TARA, penetration testing, MATLAB/Simulink, HIL/SIL and vehicle-level validation.
ISO 26262, ISO/SAE 21434, UNECE R155, UNECE R156, Threat Analysis and Risk Assessment (TARA), Unified Diagnostic Services (UDS) (ISO 14229), CAN, LIN, FlexRay, Automotive Ethernet, A2B, LVDS, CANalyzer, CANoe, MATLAB/Simulink, dSPACE ControlDesk, dSPACE AutomationDesk, Jira, GitHub, GitLab, Jenkins, Artifactory, Siemens Polarion, IBM DOORS Next Gen, PTC Windchill, SIL, HIL