542 vulnerability jobs at 227 companies in California

3w
Save
Mark Applied
Hide
Vulnerability Researcher
Camp Pendleton, California, United States
$110k-$120k/yr OnsiteFull Time
Lumbee Holdings
Lumbee Holdings: Provides government contracting, IT, and construction services.
5+ YOEAdvanced vulnerability research and exploit development skills for embedded and system software; proficiency in low-level languages and debuggers; experience with fuzzing, reverse engineering, and producing technical reports.
Ghidra, IDA Pro, WinDbg, OllyDbg, gdb, Python, Perl, Ruby, C, C++
2w
Save
Mark Applied
Hide
Staff Vulnerability Management Engineer
Seattle or San Francisco
$144k-$248k/yr OnsiteFull Time
SoFi
SoFiNasdaq: SOFI: Mobile-first platform for banking, lending, and investment services.
Deep vulnerability management and security engineering expertise; strong software engineering skills in Python/Go/JavaScript/TypeScript; experience with cloud, containers, SBOMs, and vulnerability tooling; ability to lead technical initiatives and incident response.
Python, Go, JavaScript, TypeScript, Java, Wiz, Semgrep, Snyk, Socket, Rapid7, Tenable, Checkmarx, Tines, AWS Lambda, Google Cloud Functions, AWS, GCP, Azure, Kubernetes, SBOM, SLSA, CVSS, EPSS, CISA KEV, SAST, SCA
1mo
Save
Mark Applied
Hide
Vulnerability Management Engineer III
Sacramento, California, United States
$147k-$235k/yr HybridFull Time
Sutter Health
Sutter Health: Operates an integrated network of hospitals and medical clinics.
9+ YOEDevelop and operate enterprise vulnerability management platform; design data pipelines; integrate with ITSM; build risk-based prioritization and executive reporting. Requires ~9 years relevant experience and bachelor\u0002s or equivalent.
Tenable One, ServiceNow Vulnerability Response, CMDB, REST APIs, PowerShell, Python
2mo
Save
Mark Applied
Hide
Sr Vulnerability Management Engineer
Minnesota or Oklahoma or Maine or Massachusetts or Wisconsin or South Dakota or Iowa or Utah or Oregon or Montana or Hawaii or New Jersey or Delaware or New York or Nevada or Ohio or Washington or North Carolina or Missouri or New Hampshire or California or Alaska or Alabama or Rhode Island or Indiana or Georgia or South Carolina or Texas or Kentucky or Virginia or Kansas or Arizona or North Dakota or Michigan or Vermont or Nebraska or Wyoming or Connecticut or Colorado or Mississippi or Idaho or New Mexico or Tennessee or Pennsylvania or West Virginia or Arkansas or Florida or Maryland or Louisiana or Illinois or District of Columbia or New York City
$143k-$197k/yr RemoteFull Time
Solventum
SolventumNYSE: SOLV: Provides medical technology and health information software solutions.
7+ YOEBachelor's degree and 7+ years vulnerability management experience; administer Qualys/Tenable or similar; AWS/Azure knowledge; experience leading cross‑team remediation; familiarity with NIST/FedRAMP/HITRUST; ability to obtain Public Trust clearance.
Qualys, Tenable, AWS, Azure
1mo
Save
Mark Applied
Hide
Vulnerability & Cloud Security Program Manager
California or Colorado or Connecticut or Florida or Georgia or Illinois or Kansas or Maine or Massachusetts or Maryland or New Jersey or North Carolina or New York or Oregon or Tennessee or Texas or Virginia or Washington or Austin or Tampa
$180k-$220k/yr HybridFull Time
NinjaOne
NinjaOne: Unified IT platform for automated endpoint management and security.
5+ YOE5+ years in vulnerability management with 2+ years in cloud security; hands-on experience with CSPM and vulnerability tools (Wiz, AWS Inspector, Nessus, OpenSCAP); AWS security knowledge; bachelor's in related field or equivalent; CISSP/AWS/GIAC preferred.
Wiz, AWS Inspector, Nessus, OpenSCAP, AWS, CVSS
1mo
Save
Mark Applied
Hide
Staff Security Engineer – Vulnerability Management
Seattle or Palo Alto or Dallas or Bethesda or Washington
$110k-$230k/yr HybridFull Time
GEICO
GEICO: Provides vehicle and property insurance services to consumers.
8+ YOE8+ years in cybersecurity/security engineering; deep vulnerability management, cloud/containers experience; strong Python/Go/Java scripting, SQL, automation, offensive security, and ability to influence technical stakeholders.
Python, Go, Java, SQL, CI/CD, DevSecOps, SIEM, SOAR
1mo
Save
Mark Applied
Hide
Senior Manager, Application Vulnerability Validation & Verification - USDS
San Jose, California, United States
$200k-$442k/yr OnsiteFull Time
TikTok USDS Joint Venture
TikTok USDS Joint Venture: Operates and secures TikTok services for U.S. users.
5+ YOETechnical AppSec leadership with team management, manual vulnerability validation, SAST/DAST/SCA orchestration, scripting (Python/Go/Java/JavaScript), and modern cloud-native architecture knowledge.
Checkmarx, Veracode, Burp Suite Enterprise, Snyk, GitHub Advanced Security, Python, Go, Java, JavaScript, Kubernetes, Docker
1mo
Save
Mark Applied
Hide
Principal, Security Engineering & Vulnerability Management for WB Games
Burbank or New York City
$177k-$329k/yr HybridFull Time
Warner Bros. Discovery
Warner Bros. DiscoveryNasdaq: WBD: Produces and distributes multimedia entertainment content and news worldwide.
10+ YOE10+ Mgmt10+ years technical security experience and 10+ years supervisory experience; expertise in vulnerability management, secure software development (GitHub/Perforce, SAST/DAST, CI/CD, secrets management), cloud security, SIEM, EDR/XDR, IAM, and familiarity with ISO/NIST/PCI/GDPR/CCPA/SOX.
GitHub, Perforce, SAST, DAST, secrets management, CI/CD, OWASP, SIEM, EDR/XDR
3mo
Save
Mark Applied
Hide
Senior Security Software Engineer, Vulnerability Management
San Mateo, California, United States
$217k-$269k/yr OnsiteFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years in software engineering with a security focus; proficient in Python, Go, Java, or C#; strong problem-solving; track record delivering features and solving operational problems.
Python, Go, Java, C#
2mo
Save
Mark Applied
Hide
Security Engineer, AI Vulnerability Management
Menlo Park or Bellevue
$122k-$185k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
3+ YOE3+ years in security engineering or security automation; Python or Go proficiency; cloud-native infra experience; vulnerability management knowledge; experience with security tooling.
Python, Go, AWS, Kubernetes, Snyk, Semgrep, Wiz, EndorLabs, TruffleHog
2w
Save
Mark Applied
Hide
Senior Security Specialist, Vulnerability Management
Carlsbad or Reston or San Jose or San Francisco or New York City
$121k-$191k/yr OnsiteFull Time
Viasat
ViasatNASDAQ: VSAT: Provides global satellite broadband and secure networking communication services.
5+ YOE5+ years vulnerability management experience (3+ years tactical), expertise with EPSS/CVSS/SSVC/KEV, audit readiness (ISO27001/PCI/CMMC), OS/container/cloud security knowledge, and strong communication for risk decisions.
EPSS, CVSS, SSVC, KEV, CI/CD
2w
Save
Mark Applied
Hide
Senior Security Specialist, Vulnerability Management
Carlsbad or Reston
$121k-$191k/yr OnsiteFull Time
Viasat
ViasatNASDAQ: VSAT: Provider of global satellite-based connectivity and secure communication solutions.
5+ YOE5+ years vulnerability management experience (≥3 years tactical), knowledge of EPSS/CVSS/SSVC/KEV, audit defense experience, tooling proficiency with enterprise scanners/cloud platforms, OS/container/cloud security understanding.
EPSS, CVSS, SSVC, KEV, CI/CD
2mo
Save
Mark Applied
Hide
Sr. Security Software Engineer, Vulnerability Management - Slack
Atlanta or Seattle or San Francisco
$173k-$260k/yr HybridFull Time
Salesforce
SalesforceNYSE: CRM: Provides cloud-based customer relationship management and enterprise software.
6+ YOE6+ years software engineering with security focus; strong Python; vulnerability management experience; CI/CD and cross-functional collaboration.
Python, Vulnerability scanners, CI/CD, SIEM, Cloud (AWS/Azure/GCP), Containers
2mo
Save
Mark Applied
Hide
Principal Security Researcher (AI-Assisted Vulnerability Research)
Santa Clara, California, United States
$163k-$263k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Provides enterprise-grade network, cloud, and endpoint security software.
7+ YOEMaster's degree or equivalent, 7+ years in vulnerability or offensive security research, strong programming and systems knowledge, experience with fuzzing, reverse engineering, AI-assisted workflows, and producing high-impact security research artifacts.
LLMs, AI agents, Fuzzing, Static analysis, Dynamic analysis, Reverse engineering, Exploitability analysis, Security automation, Program analysis
1mo
Save
Mark Applied
Hide
Security Engineer, Vulnerability Management and Automation
San Jose, California, United States
$150k-$350k/yr OnsiteFull Time
Figure
Figure: Develops autonomous humanoid robots for commercial and residential tasks.
6+ YOE6+ years enterprise/cloud security engineering; B.S. in CS/Engineering/Information Systems or equivalent experience; strong software engineering (C/C++, Rust, Golang, Python); experience with Azure/AWS/GCP, federated auth (SAML, SCIM, OIDC), network security, and cloud security.
SAML, SCIM, OPA, OIDC, mTLS, 802.1X, SSH, DNSSEC, Certificate transparency, VPN, Azure, AWS, Google Cloud Platform, C/C++, Rust, Golang, Python
2mo
Save
Mark Applied
Hide
Sr. Security Software Engineer, Vulnerability Management - Slack
Atlanta or Seattle or San Francisco
$173k-$260k/yr HybridFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
6+ YOE6+ years software engineering with security focus; proficient in Python; experience with security tooling and CI/CD; strong cross-team collaboration and communication.
Python
1mo
Save
Mark Applied
Hide
Endpoint Security & Exposure Engineer (Cyber Security)
Houston or Austin or Chicago or Atlanta or San Francisco or Seattle or Miami or Dallas
$100k-$120k/yr OnsiteFull Time
Jacobs
JacobsNYSE: J: Global provider of professional engineering and technical services.
5+ YOE5+ years cybersecurity experience; hands-on endpoint security, application control, privilege and vulnerability management; ServiceNow Vulnerability Response experience; scripting with PowerShell or Python.
Microsoft Windows Server, Windows 11, Linux, Active Directory, Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, Azure, AWS, Google Cloud, ServiceNow Vulnerability Response, PowerShell, Python, Rapid7, Tenable, Qualys
1w
Save
Mark Applied
Hide
Senior Security Research Engineer
United States or California or Seattle
$176k-$263k/yr RemoteFull Time
Sony Interactive Entertainment
Sony Interactive EntertainmentNYSE: SONY: Provides PlayStation gaming hardware, software, and digital network services.
8+ YOE8+ years in information security or related fields, vulnerability management or security research experience, bachelor's degree or equivalent, technical leadership, scripting, automation, and vulnerability analysis skills.
MITRE ATT&CK, Python, SQL, Bash, PowerShell, JavaScript, Snowflake, Domo, CI/CD
2w
Save
Mark Applied
Hide
Attack Surface Management, Lead Analyst
Los Angeles, California, United States
$162k-$201k/yr RemoteFull Time
University of Southern California
University of Southern California: Private research university providing higher education and healthcare services.
5+ YOE5+ years ASM/vulnerability management experience, knowledge of security frameworks and cloud-native practices, ability to build and operate vulnerability programs, strong communication and project management skills.
AWS, Azure, MITRE ATT&CK, NIST Cybersecurity Framework (NIST CSF), ISO/IEC 27001, OWASP Top Ten, CIS Controls, COBIT, SANS Critical Security Controls, PCI DSS, NIST SP 800-53, ITIL
1mo
Save
Mark Applied
Hide
Business Analyst
Dublin, California, United States
$85k-$136k/yr HybridFull Time
Ross Stores
Ross StoresNASDAQ: ROST: Discount retail chain selling brand-name apparel and home fashions
3+ YOE3+ years vulnerability remediation or security operations experience, undergraduate degree or equivalent, strong Linux and Java vulnerability knowledge, reporting and communication skills, and ability to drive remediation and improve patch processes.