542 vulnerability jobs at 227 companies in California
3w
Save
Mark Applied
Hide
3w
Vulnerability Researcher
Camp Pendleton, California, United States
$110k-$120k/yrOnsiteFull Time
Lumbee Holdings: Provides government contracting, IT, and construction services.
5+ YOEAdvanced vulnerability research and exploit development skills for embedded and system software; proficiency in low-level languages and debuggers; experience with fuzzing, reverse engineering, and producing technical reports.
Ghidra, IDA Pro, WinDbg, OllyDbg, gdb, Python, Perl, Ruby, C, C++
SoFiNasdaq: SOFI: Mobile-first platform for banking, lending, and investment services.
Deep vulnerability management and security engineering expertise; strong software engineering skills in Python/Go/JavaScript/TypeScript; experience with cloud, containers, SBOMs, and vulnerability tooling; ability to lead technical initiatives and incident response.
Sutter Health: Operates an integrated network of hospitals and medical clinics.
9+ YOEDevelop and operate enterprise vulnerability management platform; design data pipelines; integrate with ITSM; build risk-based prioritization and executive reporting. Requires ~9 years relevant experience and bachelor\u0002s or equivalent.
Minnesota or Oklahoma or Maine or Massachusetts or Wisconsin or South Dakota or Iowa or Utah or Oregon or Montana or Hawaii or New Jersey or Delaware or New York or Nevada or Ohio or Washington or North Carolina or Missouri or New Hampshire or California or Alaska or Alabama or Rhode Island or Indiana or Georgia or South Carolina or Texas or Kentucky or Virginia or Kansas or Arizona or North Dakota or Michigan or Vermont or Nebraska or Wyoming or Connecticut or Colorado or Mississippi or Idaho or New Mexico or Tennessee or Pennsylvania or West Virginia or Arkansas or Florida or Maryland or Louisiana or Illinois or District of Columbia or New York City
$143k-$197k/yrRemoteFull Time
SolventumNYSE: SOLV: Provides medical technology and health information software solutions.
7+ YOEBachelor's degree and 7+ years vulnerability management experience; administer Qualys/Tenable or similar; AWS/Azure knowledge; experience leading cross‑team remediation; familiarity with NIST/FedRAMP/HITRUST; ability to obtain Public Trust clearance.
California or Colorado or Connecticut or Florida or Georgia or Illinois or Kansas or Maine or Massachusetts or Maryland or New Jersey or North Carolina or New York or Oregon or Tennessee or Texas or Virginia or Washington or Austin or Tampa
$180k-$220k/yrHybridFull Time
NinjaOne: Unified IT platform for automated endpoint management and security.
5+ YOE5+ years in vulnerability management with 2+ years in cloud security; hands-on experience with CSPM and vulnerability tools (Wiz, AWS Inspector, Nessus, OpenSCAP); AWS security knowledge; bachelor's in related field or equivalent; CISSP/AWS/GIAC preferred.
Seattle or Palo Alto or Dallas or Bethesda or Washington
$110k-$230k/yrHybridFull Time
GEICO: Provides vehicle and property insurance services to consumers.
8+ YOE8+ years in cybersecurity/security engineering; deep vulnerability management, cloud/containers experience; strong Python/Go/Java scripting, SQL, automation, offensive security, and ability to influence technical stakeholders.
TikTok USDS Joint Venture: Operates and secures TikTok services for U.S. users.
5+ YOETechnical AppSec leadership with team management, manual vulnerability validation, SAST/DAST/SCA orchestration, scripting (Python/Go/Java/JavaScript), and modern cloud-native architecture knowledge.
Principal, Security Engineering & Vulnerability Management for WB Games
Burbank or New York City
$177k-$329k/yrHybridFull Time
Warner Bros. DiscoveryNasdaq: WBD: Produces and distributes multimedia entertainment content and news worldwide.
10+ YOE10+ Mgmt10+ years technical security experience and 10+ years supervisory experience; expertise in vulnerability management, secure software development (GitHub/Perforce, SAST/DAST, CI/CD, secrets management), cloud security, SIEM, EDR/XDR, IAM, and familiarity with ISO/NIST/PCI/GDPR/CCPA/SOX.
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years in software engineering with a security focus; proficient in Python, Go, Java, or C#; strong problem-solving; track record delivering features and solving operational problems.
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
3+ YOE3+ years in security engineering or security automation; Python or Go proficiency; cloud-native infra experience; vulnerability management knowledge; experience with security tooling.
Carlsbad or Reston or San Jose or San Francisco or New York City
$121k-$191k/yrOnsiteFull Time
ViasatNASDAQ: VSAT: Provides global satellite broadband and secure networking communication services.
5+ YOE5+ years vulnerability management experience (3+ years tactical), expertise with EPSS/CVSS/SSVC/KEV, audit readiness (ISO27001/PCI/CMMC), OS/container/cloud security knowledge, and strong communication for risk decisions.
7+ YOEMaster's degree or equivalent, 7+ years in vulnerability or offensive security research, strong programming and systems knowledge, experience with fuzzing, reverse engineering, AI-assisted workflows, and producing high-impact security research artifacts.
LLMs, AI agents, Fuzzing, Static analysis, Dynamic analysis, Reverse engineering, Exploitability analysis, Security automation, Program analysis
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
6+ YOE6+ years software engineering with security focus; proficient in Python; experience with security tooling and CI/CD; strong cross-team collaboration and communication.
Houston or Austin or Chicago or Atlanta or San Francisco or Seattle or Miami or Dallas
$100k-$120k/yrOnsiteFull Time
JacobsNYSE: J: Global provider of professional engineering and technical services.
5+ YOE5+ years cybersecurity experience; hands-on endpoint security, application control, privilege and vulnerability management; ServiceNow Vulnerability Response experience; scripting with PowerShell or Python.
Microsoft Windows Server, Windows 11, Linux, Active Directory, Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, Azure, AWS, Google Cloud, ServiceNow Vulnerability Response, PowerShell, Python, Rapid7, Tenable, Qualys
Sony Interactive EntertainmentNYSE: SONY: Provides PlayStation gaming hardware, software, and digital network services.
8+ YOE8+ years in information security or related fields, vulnerability management or security research experience, bachelor's degree or equivalent, technical leadership, scripting, automation, and vulnerability analysis skills.
University of Southern California: Private research university providing higher education and healthcare services.
5+ YOE5+ years ASM/vulnerability management experience, knowledge of security frameworks and cloud-native practices, ability to build and operate vulnerability programs, strong communication and project management skills.
Ross StoresNASDAQ: ROST: Discount retail chain selling brand-name apparel and home fashions
3+ YOE3+ years vulnerability remediation or security operations experience, undergraduate degree or equivalent, strong Linux and Java vulnerability knowledge, reporting and communication skills, and ability to drive remediation and improve patch processes.