40 vulnerability engineer jobs at 32 companies in Whittier, CA
1mo
Save
Mark Applied
Hide
1mo
Principal, Security Engineering & Vulnerability Management for WB Games
Burbank or New York City
$177k-$329k/yrHybridFull Time
Warner Bros. DiscoveryNasdaq: WBD: Produces and distributes multimedia entertainment content and news worldwide.
10+ YOE10+ Mgmt10+ years technical security experience and 10+ years supervisory experience; expertise in vulnerability management, secure software development (GitHub/Perforce, SAST/DAST, CI/CD, secrets management), cloud security, SIEM, EDR/XDR, IAM, and familiarity with ISO/NIST/PCI/GDPR/CCPA/SOX.
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
RAVE Aerospace: Developing in-flight entertainment and connectivity systems for airlines.
6+ YOEBachelor's in Engineering or equivalent,6+ years systems engineering,knowledge of DO-326A/ED-202A/ISO 27000/ARINC 811,threat modeling,secure coding (C/C++ or Golang),cloud (AWS, Azure),EDR,SIEM,vulnerability management.
DO-326A/ED-202A, ISO 27000, ARINC 811, C/C++, Golang, AWS, Azure, EDR, SIEM, Kali Linux, nmap, Burp Suite, Nessus, OpenVAS, Android, Linux
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
MiniMed GroupNasdaq: MMED: A medical device focused on full‑stack insulin delivery systems and connected diabetes care solutions.
7+ YOEBachelor's degree plus 7+ years (or advanced degree plus 5+ years) in cybersecurity engineering; experience with secure SDLC, threat modeling, vulnerability management, cloud product security, medical device cybersecurity and applicable standards (FDA guidance, ISO 27001, NIST).
Los Angeles or Palo Alto or Bellevue or Santa Monica
$133k-$235k/yrOnsiteFull Time
SnapNYSE: SNAP: Develops social media applications and augmented reality technology.
2+ YOEBachelor’s degree or equivalent, 2+ years security-related experience, expertise in infrastructure/application/cloud security domains, programming (Python/Go/Java), experience with vulnerability scanners, SIEM, EDR, and strong communication and problem-solving skills.
The Aerospace Corporation: Provides technical expertise and research for national space programs.
12+ YOEBachelor's in STEM,12+ years cybersecurity systems experience,Top Secret/SCI clearance required,U.S. citizenship,cybersecurity architecture,threat/vulnerability analysis,and ability to travel ~20%.
Anduril Industries: Defense technology building autonomous military hardware and software.
U.S. Person required. Experience with Linux kernel development, board bring-up (device trees, bootloaders, kernel drivers), uboot/EDK2, triaging and patching vulnerabilities, C or Rust, and interest in Nix/NixOS instead of Yocto/buildroot.
BDNYSE: BDX: Manufactures medical devices, surgical instruments, and pharmacy automation systems.
3+ YOEBachelor's in cybersecurity/computer science or related; 3+ years in product security/product or software development or QA; experience with static code analysis and vulnerability scanning; foundational cryptography and PKI; knowledge of threat modeling and medical-device security.
Black Duck, Coverity, Veracode, Nessus, Snyk, Metasploit, SBOM, TLS, mTLS, HL7, FHIR, Bluetooth LE, STRIDE, PASTA, NIST, OWASP, PKI
Esri: Developing software for digital mapping and spatial data analysis.
8+ YOE8+ years in RMF/A&A, vulnerability scanning, system hardening for Linux/Windows, experience with RMF tools (XACTA/eMASS), DoD 8570 certification, active Top Secret/SCI clearance, and a relevant bachelor's degree.
5+ YOERequires 5+ years in systems or infrastructure engineering, enterprise Windows Server, VMware, backup, disaster recovery, storage, Microsoft 365, Entra ID, Intune, security platforms, and vulnerability management.
VMware, Nutanix, Windows, Linux, NetApp, Quantum, Veeam, BackupExec, Microsoft SQL Server, Arctic Wolf MDR, Jamf Pro, Microsoft Intune, Microsoft Entra ID, Okta, Amazon Web Services (AWS), Microsoft Azure, Atlassian Jira, Atlassian Confluence, Atlassian Bitbucket, Tableau, Terraform, CloudFormation, Bicep, PowerShell, Python, Bash
Los Angeles Times: Publishes news and produces multimedia storytelling content.
3+ YOE3+ years cybersecurity experience (with bachelor's) or 5+ years without degree; experience with security operations, vulnerability management, IAM, incident response, documentation, and cloud/endpoint security.
Southern California Alcohol and Drug Programs: Provides substance abuse treatment and supportive housing services.
1+ YOEFingerprint/background clearance, high school diploma/GED, minimum 1 year case management or job developer experience, ability to work with vulnerable clients under stress.
Credit Union of Southern California: A member-owned financial cooperative providing banking and loan products.
5+ YOE5+ years experience on multi-site routed networks (SD-WAN, routing, Layer 2 switching, VoIP); strong troubleshooting, documentation, PowerShell automation, and security/vulnerability remediation skills; valid CA driver’s license and reliable transportation.
SD-WAN, PowerShell, Microsoft Azure, Amazon AWS, Cisco Catalyst, Meraki, Cisco ASA, SonicWall, Kemp Load Balancer, Rapid7, Microsoft Word, Microsoft Excel, Outlook, Microsoft PowerPoint, Microsoft Teams
UCLA Health: Provides comprehensive hospital services and academic medical research.
5+ YOERequires 5+ years supporting enterprise endpoint management and infrastructure, with Active Directory, Group Policy, SCCM/MECM, Windows and macOS administration, vulnerability management, and stakeholder communication experience.
Microsoft Endpoint Configuration Manager (MECM), JAMF, Group Policy Objects (GPOs), Microsoft Active Directory, Microsoft SCCM/MECM, Microsoft Intune, Tanium, Box, Atlassian
Latham & Watkins: Global law firm providing legal services for complex corporate matters.
8+ YOEBachelor's or equivalent, active security certification, 8+ years IT including information security, experience with Windows/Linux, network/firewall, SIEM/SOAR/EDR, vulnerability assessment, incident response, and strong communication skills.