20 vulnerability management engineer jobs at 17 companies in Upland, CA
1mo
Save
Mark Applied
Hide
1mo
Principal, Security Engineering & Vulnerability Management for WB Games
Burbank or New York City
$177k-$329k/yrHybridFull Time
Warner Bros. DiscoveryNasdaq: WBD: Produces and distributes multimedia entertainment content and news worldwide.
10+ YOE10+ Mgmt10+ years technical security experience and 10+ years supervisory experience; expertise in vulnerability management, secure software development (GitHub/Perforce, SAST/DAST, CI/CD, secrets management), cloud security, SIEM, EDR/XDR, IAM, and familiarity with ISO/NIST/PCI/GDPR/CCPA/SOX.
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
RAVE Aerospace: Developing in-flight entertainment and connectivity systems for airlines.
6+ YOEBachelor's in Engineering or equivalent,6+ years systems engineering,knowledge of DO-326A/ED-202A/ISO 27000/ARINC 811,threat modeling,secure coding (C/C++ or Golang),cloud (AWS, Azure),EDR,SIEM,vulnerability management.
DO-326A/ED-202A, ISO 27000, ARINC 811, C/C++, Golang, AWS, Azure, EDR, SIEM, Kali Linux, nmap, Burp Suite, Nessus, OpenVAS, Android, Linux
Los Angeles Times: Publishes news and produces multimedia storytelling content.
3+ YOE3+ years cybersecurity experience (with bachelor's) or 5+ years without degree; experience with security operations, vulnerability management, IAM, incident response, documentation, and cloud/endpoint security.
Southern California Alcohol and Drug Programs: Provides substance abuse treatment and supportive housing services.
1+ YOEFingerprint/background clearance, high school diploma/GED, minimum 1 year case management or job developer experience, ability to work with vulnerable clients under stress.
6+ YOESenior cybersecurity professional with 6+ years experience in offensive and defensive security, vulnerability management, threat detection, incident response, cloud and infrastructure security, scripting (PowerShell, Python, JavaScript), and integrating automation and SIEM/SOAR tooling.
PowerShell, Python, JavaScript, MITRE ATT&CK, NIST CSF, ISO27001, Center for Internet Security, OWASP, CI/CD, Security Orchestration Automation and Response, Security Information and Event Management, Vulnerability Scanning, Security Threat Feeds, Red Team Tooling
Columbia BankNASDAQ: COLB: Commercial and consumer banking services in the Western United States.
Administer and monitor enterprise security services (firewalls, IDS/IPS, proxy, SIEM, IAM), perform incident response, vulnerability management, and regulatory compliance; 2–7 years IT/cybersecurity experience preferred; strong communication and prioritization skills.
Firewalls, Intrusion Detection/Prevention System, Proxy, Mail Gateways, Data Loss Prevention, Denial of Service Protection, Network Access Control, Endpoint Protection Suite, Advanced Malware Prevention, Vulnerability Management, Security Information and Event Management, Identity Governance, Single Sign-On, Public Key Infrastructure, Privileged Account Management, IDS/IPS, routers, switches
Latham & Watkins: Global law firm providing legal counsel to businesses.
8+ YOE8+ years IT experience including information security, active security certification, bachelor\u0002s degree or equivalent (experience may substitute), proficiency with Windows/Linux, network/firewall management, SIEM/SOAR/EDR, vulnerability assessment, incident response, penetration testing; Python and law office experience preferred.
Microsoft Windows, Linux, SIEM, SOAR, EDR, Python, firewall
Lead Security Assessment Engineer (Hybrid - Seattle)
Seattle or Los Angeles or San Francisco
$166k-$258k/yrHybridFull Time
Nordstrom: Operates luxury department stores and off-price retail outlets.
8+ YOEBachelor's or master's in CS/cyber or equivalent, 8+ years cybersecurity experience, strong secure SDLC, threat modeling, vulnerability management, experience with security assessment tools and AI, familiarity with cloud-native architectures and APIs.
SCAN Health Plan: Providing Medicare Advantage plans and integrated healthcare for seniors.
10+ YOE10+ years cybersecurity experience with 3+ years focused on AI/ML security, proven Azure AI stack expertise, knowledge of LLM vulnerabilities, data security, and AI governance.
Azure OpenAI Studio, Azure AI Foundry, Azure AI Search, Azure Machine Learning, Azure Kubernetes Service (AKS), Model Context Protocol (MCP), REST, gRPC, Python, PowerShell, Bash, Azure Entra ID
Los Angeles or San Francisco or New York City or United States or Canada
$194k-$285k/yrRemoteFull Time
DoorDashNASDAQ: DASH: On-demand delivery platform connecting consumers with local merchants.
12+ YOE3+ Mgmt12+ years as a Security Product Engineer with 3+ years of technical leadership; Master's in CS/Security Engineering or equivalent experience; proven product/security engineering, vulnerability management, AI security, and cross-functional leadership.