HiringCafe
Join our community

107 vulnerability management jobs at 83 companies in San Francisco, CA

2w
Save
Mark Applied
Hide
Vulnerability Management Engineer
Pune or Milpitas or Seattle or Princeton or Cape Town or London or Zurich or Singapore or Mexico City or North America or Europe or Africa or Asia
RemoteFull Time
Zensar
ZensarNational Stock Exchange of India: ZENSARTECH: Global technology firm providing digital transformation and infrastructure services.
4+ YOEBachelor's degree in a related field and 4–10 years of vulnerability management, Windows infrastructure, cybersecurity operations, or endpoint security experience; requires enterprise remediation, risk assessment, and Windows security expertise.
Qualys, Tenable, Rapid7, Microsoft Defender Vulnerability Management, Windows Server, Windows 10/11, Microsoft Defender for Endpoint, SCCM/MECM, Microsoft Intune, Active Directory, Group Policy, Entra ID (Azure AD), DNS, DHCP, CVSS, Common Vulnerabilities and Exposures (CVE), CIS Benchmarks, NIST, ISO 27001, PowerShell, Azure
Job PostingView all
2w
Save
Mark Applied
Hide
Staff Vulnerability Management Engineer
Seattle or San Francisco
$144k-$248k/yr OnsiteFull Time
SoFi
SoFiNasdaq: SOFI: Mobile-first platform for banking, lending, and investment services.
Deep vulnerability management and security engineering expertise; strong software engineering skills in Python/Go/JavaScript/TypeScript; experience with cloud, containers, SBOMs, and vulnerability tooling; ability to lead technical initiatives and incident response.
Python, Go, JavaScript, TypeScript, Java, Wiz, Semgrep, Snyk, Socket, Rapid7, Tenable, Checkmarx, Tines, AWS Lambda, Google Cloud Functions, AWS, GCP, Azure, Kubernetes, SBOM, SLSA, CVSS, EPSS, CISA KEV, SAST, SCA
Job PostingView all
2mo
Save
Mark Applied
Hide
Staff Security Engineer – Vulnerability Management
Seattle or Palo Alto or Dallas or Bethesda or Washington
$110k-$230k/yr HybridFull Time
GEICO
GEICO: Provides vehicle and property insurance services to consumers.
8+ YOE8+ years in cybersecurity/security engineering; deep vulnerability management, cloud/containers experience; strong Python/Go/Java scripting, SQL, automation, offensive security, and ability to influence technical stakeholders.
Python, Go, Java, SQL, CI/CD, DevSecOps, SIEM, SOAR
Job PostingView all
3mo
Save
Mark Applied
Hide
Senior Security Software Engineer, Vulnerability Management
San Mateo, California, United States
$217k-$269k/yr OnsiteFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years in software engineering with a security focus; proficient in Python, Go, Java, or C#; strong problem-solving; track record delivering features and solving operational problems.
Python, Go, Java, C#
Job PostingView all
1d
Save
Mark Applied
Hide
Vice President, Product Management – Exposure Command & Vulnerability Management
San Francisco or California
$259k-$351k/yr RemoteFull Time
Rapid7
Rapid7NASDAQ: RPD: Provides cybersecurity risk management and threat detection software solutions.
15+ YOE5+ Mgmt15+ years in product management leadership, including 5+ years at director or VP level, with cybersecurity SaaS expertise, cloud security knowledge, executive communication, and experience scaling product teams.
AWS, Azure, GCP, CI/CD, CNAPP, AppSec, SaaS, InsightVM, Gartner, Forrester, IDC
Job PostingView all
2mo
Save
Mark Applied
Hide
Security Engineer, AI Vulnerability Management
Menlo Park or Bellevue
$122k-$185k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
3+ YOE3+ years in security engineering or security automation; Python or Go proficiency; cloud-native infra experience; vulnerability management knowledge; experience with security tooling.
Python, Go, AWS, Kubernetes, Snyk, Semgrep, Wiz, EndorLabs, TruffleHog
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Manager, Application Vulnerability Validation & Verification - USDS
San Jose, California, United States
$200k-$442k/yr OnsiteFull Time
TikTok USDS Joint Venture
TikTok USDS Joint Venture: Operates and secures TikTok services for U.S. users.
5+ YOETechnical AppSec leadership with team management, manual vulnerability validation, SAST/DAST/SCA orchestration, scripting (Python/Go/Java/JavaScript), and modern cloud-native architecture knowledge.
Checkmarx, Veracode, Burp Suite Enterprise, Snyk, GitHub Advanced Security, Python, Go, Java, JavaScript, Kubernetes, Docker
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Security Specialist, Vulnerability Management
Carlsbad or Reston or San Jose or San Francisco or New York City
$121k-$191k/yr OnsiteFull Time
Viasat
ViasatNASDAQ: VSAT: Provides global satellite broadband and secure networking communication services.
5+ YOE5+ years vulnerability management experience (3+ years tactical), expertise with EPSS/CVSS/SSVC/KEV, audit readiness (ISO27001/PCI/CMMC), OS/container/cloud security knowledge, and strong communication for risk decisions.
EPSS, CVSS, SSVC, KEV, CI/CD
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr. Security Software Engineer, Vulnerability Management - Slack
Atlanta or Seattle or San Francisco
$173k-$260k/yr HybridFull Time
Salesforce
SalesforceNYSE: CRM: Provides cloud-based customer relationship management and enterprise software.
6+ YOE6+ years software engineering with security focus; strong Python; vulnerability management experience; CI/CD and cross-functional collaboration.
Python, Vulnerability scanners, CI/CD, SIEM, Cloud (AWS/Azure/GCP), Containers
Job PostingView all
1mo
Save
Mark Applied
Hide
Case Management Program Manager
San Jose, California, United States
$111k-$172k/yr OnsiteFull Time
Santa Clara Family Health Plan
Santa Clara Family Health Plan: Provides managed health insurance plans for Santa Clara County residents.
2+ YOEBachelor's degree or equivalent; minimum 2 years serving vulnerable members; knowledge of Medicare/Medi-Cal/CMS/DHCS/DMHC; project management, training, auditing, and strong communication and analytical skills; proficiency with Microsoft Office and related tools.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Visio, Microsoft Project, Microsoft Outlook
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Engineer, Vulnerability Management and Automation
San Jose, California, United States
$150k-$350k/yr OnsiteFull Time
Figure
Figure: Develops autonomous humanoid robots for commercial and residential tasks.
6+ YOE6+ years enterprise/cloud security engineering; B.S. in CS/Engineering/Information Systems or equivalent experience; strong software engineering (C/C++, Rust, Golang, Python); experience with Azure/AWS/GCP, federated auth (SAML, SCIM, OIDC), network security, and cloud security.
SAML, SCIM, OPA, OIDC, mTLS, 802.1X, SSH, DNSSEC, Certificate transparency, VPN, Azure, AWS, Google Cloud Platform, C/C++, Rust, Golang, Python
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr. Security Software Engineer, Vulnerability Management - Slack
Atlanta or Seattle or San Francisco
$173k-$260k/yr HybridFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
6+ YOE6+ years software engineering with security focus; proficient in Python; experience with security tooling and CI/CD; strong cross-team collaboration and communication.
Python
Job PostingView all
1mo
Save
Mark Applied
Hide
Principal / Director, Product Management – Code & Container Security
Mountain View or United States
$240k-$265k/yr HybridFull Time
Harness
Harness: AI-powered platform for automating software delivery and DevOps.
7+ YOE7-10 years product management experience in application security/DevSecOps or developer platforms; deep knowledge of SAST, SCA, vulnerability and supply-chain risk, CI/CD, and AI-assisted development; strong communication and stakeholder skills.
Harness AI, Software Delivery Knowledge Graph, SAST, SCA, LLMs, CI/CD
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr. Product Manager (PAN-OS Product Security and Lifecycle Management)
Santa Clara or San Francisco or San Jose
$149k-$241k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Provides enterprise-grade network, cloud, and endpoint security software.
5+ YOE5+ years in technical roles (software, product security, release mgmt, or systems engineering). Bachelor’s (or Master’s) in CS/CE/EE or equivalent experience. Expertise in product security, SDL, SAST/DAST, Linux, vulnerability management, network security architecture, and strong cross-functional communication.
PAN-OS, Panorama, Strata Cloud Manager, Secure Development Lifecycle (SDL), SAST, DAST, Linux, Claude Mythos, OpenAI Codex
Job PostingView all
3mo
Save
Mark Applied
Hide
Principal Product Manager, Threat Intel Platform - ETM
Foster City, California, United States
$155k-$185k/yr OnsiteFull Time
Qualys
QualysNASDAQ: QLYS: Provides cloud-based platform for cybersecurity and compliance management.
8+ YOE8+ years product management in cybersecurity or enterprise SaaS; strong domain knowledge in threat intelligence and vulnerability management.
Threat intelligence, Vulnerability data, Security scoring, AI-enabled analytics
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Product Manager, Application Security
San Francisco, California, United States
$170k-$190k/yr OnsiteFull Time
Zeta Global
Zeta GlobalNYSE: ZETA: Provides an AI-powered marketing platform for enterprise customer engagement.
4+ YOE4+ years product management with enterprise AppSec experience, knowledge of SAST/DAST/SCA, CI/CD and vulnerability management, ability to drive risk-based programs and communicate to executives.
SAST, DAST, SCA, CI/CD, IDE, MR, Snyk, Wiz, Rapid7
Job PostingView all
1d
Save
Mark Applied
Hide
Technical Program Manager, Security
Oakland, California, United States
$158k-$198k/yr HybridFull Time
Fivetran
Fivetran: Automates data movement into cloud data warehouses.
5+ YOE5+ years in technical program management focused on security engineering, vulnerability management, cloud and application security; requires security domain expertise, scripting, cross-functional collaboration, and SAST/DAST experience.
Bash, Python, JavaScript, BigQuery, Looker, Sigma, Microsoft Azure, AWS, Google Cloud Platform (GCP), Terraform, Docker, Kubernetes, GitHub, Buildkite, SonarQube, Grafana, Prisma, Snyk, Signal Sciences, AI Tools, SAST, DAST, IDS/IPS, OWASP, Application Security Verification Standard (ASVS)
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Technical Program Manager, DGX Cloud - Trust Services
Santa Clara or Seattle
$200k-$322k/yr OnsiteFull Time
NVIDIA
NVIDIANASDAQ: NVDA: Designs graphics processing units and artificial intelligence hardware.
12+ YOE12+ years TPM experience driving complex infrastructure, trust/security, compliance, or platform programs; deep understanding of firmware/platform integrity, attestation, vulnerability and secrets management; proficiency with Jira and Confluence.
Jira, Confluence
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Technical Program Manager
Denver or San Francisco
$138k-$189k/yr HybridFull Time
Gusto
Gusto: Cloud-based payroll and HR software for small businesses.
5+ YOE5+ years leading cross-functional TPM or delivery work in regulated environments; strong knowledge of vulnerability management, security operations, SIEM, detection, identity/JIT access; experience using AI plugins for delivery.
Wiz, Axonius, Panther, Opal, SIEM
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Technical Program Manager, DGX Cloud - Trust Services
Santa Clara or Seattle
$200k-$322k/yr OnsiteFull Time
NVIDIA
NVIDIANASDAQ: NVDA: Designs GPU-accelerated computing and artificial intelligence hardware.
12+ YOE12+ years TPM experience delivering complex infrastructure, trust/security, compliance, or platform programs; strong cross-functional leadership; knowledge of attestation, firmware integrity, vulnerability and secrets management; MS or equivalent.
Jira, Confluence
Job PostingView all

Explore Jobs

Expand Your Job Search