15 penetration testing jobs at 15 companies in San Francisco, CA

1w
Save
Mark Applied
Hide
Senior IT Penetration Tester
United States or Oak Brook or Los Angeles or Washington or Troy or New York City or Houston or Chicago or Grand Rapids or Owings Mills or Columbia or Richmond or Memphis or Raleigh or Boston or San Jose or San Francisco or Austin or Kalamazoo or Spokane or Denver or Fort Worth or Atlanta or Orlando or Dallas or Wilmington or Phoenix or San Antonio or Milwaukee or Madison or McLean or Melville or Woodbridge or Stamford or Philadelphia or Charlotte or Greenville or West Palm Beach or Costa Mesa or St. Louis or Fort Lauderdale or Seattle or Pittsburgh or Tulsa or Cincinnati or Cleveland or Columbus or Akron or Cherry Hill or Tampa or Minneapolis or Anchorage or Salt Lake City or Norfolk or Jacksonville or Boulder or Nashville or Las Vegas or Indianapolis or San Diego or Potomac or Baton Rouge or Omaha
$120k-$160k/yr OnsiteFull Time
BDO USA
BDO USA: Provides accounting, tax, and business advisory services to organizations.
4+ YOEFour or more years of hands-on penetration testing experience, strong Windows, Linux, networking, Active Directory, scripting, reporting, client communication, and offensive security tooling skills; high school diploma required.
Kali Linux, Nessus, Tenable, Nmap, Burp Suite, Metasploit, BloodHound, Microsoft 365, OWASP Top 10 for LLM Applications, Python, PowerShell, Bash, Git, GitHub Actions, Azure DevOps, Docker, GitHub, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Splunk, Microsoft Sentinel, GitHub Copilot, Claude Code, Microsoft Azure, AWS, SAML, OAuth 2.0, OpenID Connect, Kerberos, NTLM, TCP/IP, DNS, Windows, Linux
2mo
Save
Mark Applied
Hide
SDE in Test II, eero
Los Gatos or San Francisco
$165k-$224k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
4+ YOE4+ years professional software testing experience, 2+ years building test automation frameworks, proficiency in Java/C++/C#, penetration testing, and platform hardening for Linux and Windows.
Java, C++, C#, Selenium, Appium, React, Linux, Windows
1mo
Save
Mark Applied
Hide
Red Team Engineer, Safeguards
San Francisco or United States
$320k-$405k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
Experience in penetration testing/red teaming, model jailbreaking, web application security, building custom automation and LLM-specific testing frameworks; strong communication skills and public body of work.
Burp Suite, Metasploit, LLM
2w
Save
Mark Applied
Hide
Senior Cyber Security Engineer
Milpitas, California, United States
$154k-$255k/yr OnsiteFull Time
Sandisk
SandiskNasdaq: SNDK: Designs and manufactures flash memory and data storage products.
5+ YOE5–10+ years in cybersecurity engineering with expertise in attack surface management, penetration testing, vulnerability management, cloud security, scripting (Python/Bash/Go), and automation.
AWS, Azure, GCP, Python, Bash, Go, NIST CSF, NIST 800-82, ISO 27001, EDR/XDR, SIEM, SOAR, ASM, Claroty, Nozomi, Dragos, DevSecOps, CI/CD, Software Bill of Materials (SBOM), AI/ML
1mo
Save
Mark Applied
Hide
Senior Security Engineer
United States or San Francisco or New York City or London or Dublin or Tel Aviv or Sydney
$227k-$267k/yr RemoteFull Time
Vanta
Vanta: Automated security compliance and trust management software for businesses.
Experience with threat modeling, penetration testing or red teaming, software development and reading code to find security issues, strong communication and project management, and independent ownership of security initiatives.
2w
Save
Mark Applied
Hide
Senior Manager, Offensive Security
Redwood City, California, United States
$185k-$225k/yr RemoteFull Time
Delinea
Delinea: Provides identity security and privileged access management software.
7+ YOE3+ Mgmt7+ years hands-on penetration testing experience, 3+ years leading offensive security teams; expertise in web/API/network testing, AD/Entra ID attacks, source review, and scripting; familiarity with compliance (SOC2, ISO27001, PCI, FedRAMP).
MITRE ATT&CK, OWASP, PTES, Burp Suite, Cobalt Strike, Sliver, BloodHound, Python, Go, PowerShell, Azure, AWS, Kubernetes, CI/CD
2w
Save
Mark Applied
Hide
Senior Security Engineer
Santa Clara, California, United States
$180k-$240k/yr OnsiteFull Time
Orkes
Orkes: Cloud platform for building distributed, event-driven applications.
7+ YOE7+ years security engineering experience; production coding in Java/Python/TS; multi-cloud security (AWS/Azure/GCP); IAM/RBAC, KMS, tenant isolation; security testing in CI/CD (SAST/DAST/SCA); penetration testing and CVE response.
Java, Python, TS, AWS, Azure, GCP, Conductor, CI/CD, SAST, DAST, SCA, K8s
2mo
Save
Mark Applied
Hide
Senior Security Researcher
Santa Clara, California, United States
$140k-$226k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Provides enterprise-grade network, cloud, and endpoint security software.
3+ YOEBachelor's degree or equivalent experience, 3+ years in offensive security or vulnerability research, experience with reverse engineering/fuzzing/exploit development, familiarity with penetration testing, strong OS/network/application security knowledge.
Large Language Models (LLMs), LLMs, Reinforcement Learning, RLHF, Supervised Fine-Tuning (SFT), AI agents, fuzzers
2mo
Save
Mark Applied
Hide
Product Security Engineer
San Carlos, California, United States
$138k-$250k/yr OnsiteFull Time
1X
1X: Manufacturing safe, general-purpose humanoid robots for home and work.
5+ YOE5+ years in product/offensive security; strong Linux internals, penetration testing, cryptography/PKI, cloud/CI/CD security; proficiency in C/C++, Rust, Go or Python; bachelor’s in CS/InfoSec/Engineering or equivalent.
C, C++, Rust, Go, Python, Linux, OP-TEE, fTPM, AWS, GCP, Azure, Kubernetes, CI/CD, HSM, Thales, Utimaco, AWS CloudHSM, ACME, SCEP, NVIDIA Jetson, SBOM, PKI
2mo
Save
Mark Applied
Hide
Manager, Security Engineering
San Francisco, California, United States
OnsiteFull Time
Cohere
Cohere: Provides enterprise-grade large language models and AI software platforms.
8+ YOE8+ years in Application Security / Security Engineering; strong focus on vulnerability management, SDLC, and bug bounty; proficient in SAST, DAST, and penetration testing; programming in Python/GoLang; cloud experience (AWS/GCP/Azure); strong communication and leadership.
SAST, DAST, Penetration testing, Python, Go, AWS, GCP, Azure, CI/CD
4d
Save
Mark Applied
Hide
Inspector NonDes Test Sr
Sunnyvale or Palo Alto
$31-$58/hr OnsiteFull Time
Lockheed Martin
Lockheed MartinNYSE: LMT: Designs and manufactures advanced aerospace, defense, and security systems.
Requires Level II NDT certification in ultrasonic and radiography plus liquid penetrant or magnetic particle, U.S. citizenship, Secret clearance eligibility, and knowledge of NDT methods and processes.
GE Rhythm, YXLON F.GUI, Image 3500, NSI efX-CT, Microsoft Office, NDT inspection systems
2mo
Save
Mark Applied
Hide
Senior Security Engineer, AI/ML
Foster City, California, United States
$115k-$140k/yr OnsiteFull Time
Qualys
QualysNASDAQ: QLYS: Provides cloud-based platform for cybersecurity and compliance management.
6+ YOE6+ years combined software/ML and security research or penetration testing experience; strong Python; experience with Scikit-learn, TensorFlow or PyTorch, LangChain/LlamaIndex, vector DBs (FAISS, Pinecone, Qdrant), cloud (AWS/GCP/Azure), SQL and Pandas.
LangChain, LlamaIndex, AutoGen, CrewAI, FAISS, Pinecone, Qdrant, Python, Scikit-learn, TensorFlow, PyTorch, OpenAI, HuggingFace, MetaGPT, Guardrails.ai, LLM Guard, Tracer, GPT-4, Claude, Mistral, LLaMA, Falcon, SQL, Pandas, AWS, GCP, Azure, MLOps, STRIDE, MITRE ATLAS
1mo
Save
Mark Applied
Hide
Security Engineer — Application Security & Identity
Boston or Carmel or Chicago or Lambertville or New York City or San Francisco or United States
$60k-$80k/yr HybridFull Time
Real Chemistry
Real Chemistry: Provides marketing and communication services for healthcare companies.
5+ YOE5+ years cloud security experience (3+ in high-growth acceptable), including 2 years focused on application security; hands-on with AWS IAM, SAML/OIDC, GitHub security tooling, threat modeling, penetration testing, and familiarity with SOC 2/GDPR/HIPAA-adjacent controls.
AWS, AWS IAM, Microsoft Entra ID, SAML, OIDC, GitHub, GitHub OIDC, GitHub Advanced Security, CodeQL, SAST, Dependabot, Secret scanning, Semgrep, Snyk, Trivy, ECR scanning, OPA, Sentinel, tfsec, SIEM
2mo
Save
Mark Applied
Hide
Sr. Specialist – Security & FuSa. Integration
Charlotte or San Francisco or Los Angeles or New York City
$140k-$170k/yr OnsiteFull Time
Scout Motors
Scout Motors: Designs and manufactures all-electric rugged SUVs and trucks.
10+ YOEMaster's in EE/CE/CS with 10+ years experience; expertise in vehicle cybersecurity, ISO 26262, ISO/SAE 21434, UNECE R155/R156, ECU integration, CAN/Ethernet/LIN/FlexRay, UDS, TARA, penetration testing, MATLAB/Simulink, HIL/SIL and vehicle-level validation.
ISO 26262, ISO/SAE 21434, UNECE R155, UNECE R156, Threat Analysis and Risk Assessment (TARA), Unified Diagnostic Services (UDS) (ISO 14229), CAN, LIN, FlexRay, Automotive Ethernet, A2B, LVDS, CANalyzer, CANoe, MATLAB/Simulink, dSPACE ControlDesk, dSPACE AutomationDesk, Jira, GitHub, GitLab, Jenkins, Artifactory, Siemens Polarion, IBM DOORS Next Gen, PTC Windchill, SIL, HIL
3mo
Save
Mark Applied
Hide
Electrical Engineer – Unmanned Systems & Ground Penetrating Radar
Livermore, California, United States
$122k-$186k/yr HybridFull Time
Lawrence Livermore National Laboratory
Lawrence Livermore National Laboratory: Develops science and technology for United States national security.
0+ YOEBachelor’s in electrical engineering; PCB design experience; electrical system integration; lab testing; strong collaboration and communication.
Altium Designer, Oscilloscope, Multimeter, Power supplies, PCB fabrication and assembly coordination