HiringCafe
Join our community

30 vulnerability management engineer jobs at 25 companies in Santa Rosa, CA

2w
Save
Mark Applied
Hide
Staff Vulnerability Management Engineer
Seattle or San Francisco
$144k-$248k/yr OnsiteFull Time
SoFi
SoFiNasdaq: SOFI: Mobile-first platform for banking, lending, and investment services.
Deep vulnerability management and security engineering expertise; strong software engineering skills in Python/Go/JavaScript/TypeScript; experience with cloud, containers, SBOMs, and vulnerability tooling; ability to lead technical initiatives and incident response.
Python, Go, JavaScript, TypeScript, Java, Wiz, Semgrep, Snyk, Socket, Rapid7, Tenable, Checkmarx, Tines, AWS Lambda, Google Cloud Functions, AWS, GCP, Azure, Kubernetes, SBOM, SLSA, CVSS, EPSS, CISA KEV, SAST, SCA
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr. Security Software Engineer, Vulnerability Management - Slack
Atlanta or Seattle or San Francisco
$173k-$260k/yr HybridFull Time
Salesforce
SalesforceNYSE: CRM: Provides cloud-based customer relationship management and enterprise software.
6+ YOE6+ years software engineering with security focus; strong Python; vulnerability management experience; CI/CD and cross-functional collaboration.
Python, Vulnerability scanners, CI/CD, SIEM, Cloud (AWS/Azure/GCP), Containers
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr. Security Software Engineer, Vulnerability Management - Slack
Atlanta or Seattle or San Francisco
$173k-$260k/yr HybridFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
6+ YOE6+ years software engineering with security focus; proficient in Python; experience with security tooling and CI/CD; strong cross-team collaboration and communication.
Python
Job PostingView all
2mo
Save
Mark Applied
Hide
Site Reliability Engineer
San Francisco or South San Francisco
$150k/yr OnsiteFull Time
VantageScore
VantageScore: Provides credit scoring and data analytics solutions.
5+ YOEExperienced Site Reliability Engineer with a DevSecOps focus; patch management, vulnerability remediation; AWS and CI/CD, security tooling.
AWS, EC2, ECS, Lambda, EKS, S3, RDS, IAM, VPC, CloudTrail, Config, GuardDuty, GitHub Actions, CodePipeline, Terraform, CloudFormation, AWS CDK, Kubernetes, Snyk, Wiz, Prisma Cloud, Kong, HashiCorp Vault, Secrets Manager, CloudWatch, Datadog, Grafana
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yr RemoteFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
Job PostingView all
2mo
Save
Mark Applied
Hide
Engineer, Production Engineering
San Francisco, California, United States
HybridFull Time
Guild.ai
Guild.ai: Building a neutral control plane for production AI agents.
5+ YOE5+ years production/platform engineering experience; hands-on Kubernetes, GCP/GKE, and Terraform; programming in Python, Go, TypeScript; SOC2/compliance, vulnerability management, observability, HackerOne, and Okta experience.
Kubernetes, GKE, GCP, Terraform, AWS, Azure, OpenTelemetry, New Relic, Splunk, HackerOne, Okta, Python, Go, TypeScript, SOC2
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Engineer, Application Security
San Francisco, California, United States
$200k-$325k/yr OnsiteFull Time
Serval
Serval: AI platform for automating IT and enterprise service workflows.
10+ YOE10+ years in cybersecurity with deep expertise in application security, secure SDLC, vulnerability management, secure cloud-native architecture, leadership experience, and strong software engineering skills.
SAST, DAST, SCA, secrets scanning, fuzzing, CI/CD
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Security Engineer
San Francisco, California, United States
$180k-$250k/yr RemoteFull Time
LanceDB
LanceDB: Vector database for multimodal AI search and retrieval.
8+ YOE8+ years as a software engineer with experience on large-scale data platforms, building encryption/auth/authZ, cloud/CSP security, vulnerability management (CVE), strong communication and data-driven decision making.
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Engineer
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Security Engineer- San Francisco HQ
San Francisco, California, United States
$195k-$265k/yr HybridFull Time
Orb
Orb: Billing infrastructure for usage-based and consumption software pricing.
5+ YOE5+ years software or security engineering; hands-on cloud-native security (AWS); application and infrastructure security, IAM, vulnerability management, detection/response; strong coding and autonomous problem-solving.
Typescript, React, Tailwind CSS, Python, PostgreSQL, Apache Druid, Clickhouse, Kafka, Spark Streaming, AWS
Job PostingView all
1mo
Save
Mark Applied
Hide
Product Security Engineer
San Francisco or New York City or London or Berlin or United States
$208k-$312k/yr HybridFull Time
Vercel
Vercel: Frontend cloud platform for building and hosting web applications.
5+ YOE5+ years product security experience; threat modeling, secure code review, vulnerability management, OSS/supply-chain security, SAST/DAST and dependency scanning, CI/CD security integration, familiarity with JavaScript/TypeScript, Node.js, and Next.js; technical leadership skills.
Next.js, Node.js, JavaScript, TypeScript, GitHub Advanced Security (GHAS), GitHub workflows, CI/CD, SAST, DAST, Dependabot, Snyk, Open Policy Agent, Terraform
Job PostingView all
1mo
Save
Mark Applied
Hide
Network Security Engineer
San Francisco or United States
HybridFull Time
Kargo
Kargo: Automates warehouse loading docks using computer vision sensor towers.
3+ YOE3+ years network security experience; strong networking knowledge (TCP/IP, DNS, DHCP, VPN, routing, switching); hands-on with firewalls, endpoint protection, vulnerability management; experience securing AWS or Google Cloud Platform; Bachelor’s in related field; security certifications preferred.
TCP/IP, DNS, DHCP, VPN, routing, switching, firewalls, endpoint protection, vulnerability management tools, AWS, Google Cloud Platform, WireGuards, Tailscale, SOC 2, ISO 27001, NIST
Job PostingView all
2mo
Save
Mark Applied
Hide
Senior Security Engineer
San Francisco, California, United States
$249k-$405k/yr HybridFull Time
Ivo
Ivo: AI-powered contract review and intelligence platform for legal teams.
5+ YOE5+ years in security operations with hands-on detection engineering, incident response, cloud (GCP/Microsoft Azure) and identity security (Okta), SIEM, WAF, endpoint, vulnerability management, and scripting (Python).
Panther, SIEM, GCP, Microsoft Azure, Cloudflare WAF, Okta, SSO, SAML, SCIM, MFA, RBAC, Kandji, Material, Python, Sigma, SOAR
Job PostingView all
3mo
Save
Mark Applied
Hide
Senior Infrastructure Engineer, Cloud Security
New York or San Francisco or Washington or United States
$150k-$185k/yr HybridFull Time
Rocket Money
Rocket MoneyNYSE: RKT: Personal finance app for managing subscriptions, bills, and budgets.
6+ YOE6+ years in cloud engineering with production cloud security; Terraform; AWS/GCP; IAM; network design; vulnerability management; SIEM; on-call; collaboration.
Terraform, AWS, GCP, IAM, VPC, SIEM
Job PostingView all
1mo
Save
Mark Applied
Hide
Sr. Security Engineer
Scottsdale or San Francisco or Chicago or New York City or Phoenix
$132k-$165k/yr HybridFull Time
Early Warning Services
Early Warning Services: Operates payment and risk solutions for the financial industry.
5+ YOEBachelor's or associate degree in CS/Engineering or equivalent experience; 5+ years IT experience with 3+ years in IT security; experience with vulnerability scanning, endpoint security, Linux/Windows administration, Python scripting, networking, firewall design, and SSL/TLS certificate management.
Python, JavaScript, Linux shell, PowerShell, Linux, Windows, SSL/TLS
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Software Engineer - Product Security
New York or Seattle or San Francisco
$204k-$281k/yr HybridFull Time
Plaid
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
5+ YOE5+ years building and scaling production services; experience with vulnerability management, distributed systems, cloud infrastructure security; strong engineering and communication skills.
AWS, Kubernetes, Terraform
Job PostingView all
2mo
Save
Mark Applied
Hide
Senior Application Security Engineer
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yr RemoteFull Time
Apollo.io
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Ruby, Python, Linux, GCP, SAST
Job PostingView all
1mo
Save
Mark Applied
Hide
Endpoint Security & Exposure Engineer (Cyber Security)
Houston or Austin or Chicago or Atlanta or San Francisco or Seattle or Miami or Dallas
$100k-$120k/yr OnsiteFull Time
Jacobs
JacobsNYSE: J: Global provider of professional engineering and technical services.
5+ YOE5+ years cybersecurity experience; hands-on endpoint security, application control, privilege and vulnerability management; ServiceNow Vulnerability Response experience; scripting with PowerShell or Python.
Microsoft Windows Server, Windows 11, Linux, Active Directory, Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, Azure, AWS, Google Cloud, ServiceNow Vulnerability Response, PowerShell, Python, Rapid7, Tenable, Qualys
Job PostingView all
1mo
Save
Mark Applied
Hide
Application Security Engineer
San Francisco, California, United States
$145k-$180k/yr HybridFull Time
HeartFlow
HeartFlowNASDAQ: HTFL: Provides AI-driven non-invasive cardiac diagnostic software and analysis.
5+ YOE5+ years experience, ≥1 year in application security or security work in development; BS or equivalent/certifications; experience with secure SDLC, threat modeling, SAST/DAST/SCA, and vulnerability management.
C++, Python, Claude Code, GitHub Copilot, SAST, DAST, SCA, CI/CD, AWS, Terraform, Chef, Ansible, Docker, Kubernetes, GitHub Actions
Job PostingView all
2d
Save
Mark Applied
Hide
Senior Staff Linux Kernel Engineer
San Francisco or Sunnyvale
$250k-$300k/yr OnsiteFull Time
Crusoe
Crusoe: Provides energy-efficient cloud infrastructure powered by stranded and renewable energy.
10+ YOE3+ Mgmt10+ years in systems software engineering and 3+ years leading low-level systems teams. Requires Linux kernel internals, virtualization, C, Go/Rust/Python, CI/CD, and security vulnerability debugging expertise.
Linux, KVM, Xen, QEMU, C, Go, Rust, Python, CI/CD, CUDA, ROCm, InfiniBand, RoCE
Job PostingView all

Explore Jobs

Expand Your Job Search