102 Results for

Penetration Tester Jobs in California

Jobs

New!

San Francisco, CA4 days ago

$50–$80 Per Hour

Information collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal. Integrate security tooling (Semgrep, Snyk, CodeQL, GitHub Advanced Security, Burp Suite) into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) with minimal developer friction.

New!

Santa Ana, CA3 days ago

Full-time
Employee

Many candidates have solid network security backgrounds but lack true security architecture experience and exposure across multiple environments/verticals. Implement and maintain firewall rulesets, Network Access Control (“NAC”) solutions (e.g., Cisco Identity Service Engine (“ISE”)), and endpoint access policies.

New!

Cupertino,, California3 days ago

$80–$90 Per Hour
Contractor

The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Successfully placed or hired candidates would only be asked for banking details after accepting an offer from us during our official onboarding processes as part of payroll setup.

New!

Orange, CA1 day ago

$85–$90 Per Hour

Palo Alto Networks Platform Management:Design, Implement and maintain Palo Alto Network firewalls (NGFW), Panorama Central Management and related security services (Wildfire, Threat Prevention, URL Filtering, Anti-Virus, etc.). Qualifications:BS in Cybersecurity or related technical field, 7+ years relevant industry experience, or MS in Cybersecurity or related technical field, 5+ years relevant industry experience, or PhD in Cybersecurity or related technical field with 4+ years industry experience.

New!

Los Angeles, CA6 days ago

$50–$60

Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to: the individual’s skill sets, experience and training; licensure and certification requirements; office location and other geographic considerations; other business and organizational needs. Vaco by Highspring values a diverse workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.

New!

Los Angeles, CA6 days ago

$55–$90

Santa Ana, CA23 days ago

Full-time
Employee

Implement and maintain firewall rulesets, Network Access Control (“NAC”) solutions (e.g., Cisco Identity Service Engine (“ISE”)), and endpoint access policies. Lead structured knowledge transfer sessions, hands-on training, and real-time coaching during support and implementation activities.

Los Altos, CA9 days ago

$70–$77 Per Hour

AWS security experience (highly preferred): IAM, Cloud security best practices, Security monitoring and controls within AWS environments. This role is ideal for someone who understands how to balance security best practices while enabling innovation and flexibility for engineering and research teams.

Woodland Hills, CA16 days ago

Remote

Full-time
Employee

Qualifications:10+ years experience in product security, application security, and/or DevSecOps; You have strong knowledge of security of safety risks of LLMs and AI Agents; You have 5+ Years of experience automating security checks, including SAST, SCA, and DAST, directly into CI/CD pipelines; Extensive experience with STRIDE or other threat modeling frameworks; You have knowledge and experience with technologies including K8s, Containers, CI/CD, and CSPs. Familiarity with function and purpose of key AI platform components such as AI gateways (Kong, Databricks Mosaic AI Gateway, custom API orchestration), Model Orchestration (Examples LangChain, LlamaIndex, etc.).

Edwards AFB, California30+ days ago

$120,000–$140,000 Per Year

Understanding of aircraft network architectures, including intra-aircraft networks and inter-aircraft networks (e.g., Air Traffic Management Data Link, Aircraft Communications Addressing and Reporting System). Execute advanced attack techniques, including pass-the-hash and golden ticket attacks, to assess the effectiveness of Active Directory security controls and simulate real-world threat scenarios.

Irvine, CA30+ days ago

$80,000–$132,000

Under the mentorship of senior engineers, the successful candidate will be involved in a range of security activities for specific cloud service components, including penetration testing, threat modeling and security assessment for defined modules, contributing to investigation, risk assessment and verification for incident response. TP-Link Systems Inc. is seeking a skilled and proactive Penetration Tester, Web/Mobile Apps and Cloud Services to support our cloud service projects under the guidance of senior team members.

Pleasanton, CA30+ days ago

Blackstone Talent Group is a wholly owned subsidiary of Blackstone Technology Group, a global IT services and software firm that implements technological solutions across commercial industry verticals and the US Federal Government. The Web Application Penetration Tester will perform the manual penetration testing of mission critical web application to discover vulnerabilities and propose remediations to the development team.

Irvine, CA30+ days ago

$80,000–$132,000

Under the mentorship of senior engineers, the successful candidate will be involved in a range of security activities for a single product category, including penetration testing, threat modeling and security assessment for specific modules, contributing to investigation, risk assessment and verification for incident response. Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices.

San Francisco, CA30+ days ago

$55–$60 Per Hour

Description: In this contingent resource assignment, you may: Consult on or participate in moderately complex initiatives and deliverables within Information Security Engineering and contribute to large-scale planning related to Information Security Engineering deliverables. Required Qualifications: 4 years of Information Security Engineering experience or equivalent demonstrated through one or a combination of the following: work or consulting experience training military experience education.

Oakland, CA30+ days ago

$60–$70 Per Hour

Please be advised- If anyone reaches out to you about an open position connected with Eliassen Group, please confirm that they have an Eliassen.com email address and never provide personal or financial information to anyone who is not clearly associated with Eliassen Group. For over 30 years, Eliassen has helped thousands of companies reach further and achieve more with their technology solutions, financial, risk & compliance, and advisory solutions, and clinical solutions.

Mountain View, CA17 days ago

You will lead complex penetration tests, design novel attack techniques for web and modern AI-powered applications, and influence secure-by-design architecture at scale. In this role, you will think like an attacker, operate with engineering rigor, and work closely with product, platform, and AI teams to raise the security bar across the organization.

Carlsbad, California30+ days ago

$147,000–$232,000 Per Year

CTI-Driven Threat Hunts: collaborate closely with the Cyber Threat Intelligence (CTI) team to analyze relevant intel, extract actionable insights, and detect potential Indicators of Compromise (IoC) associated with Advanced Persistent Threats (APTs). Documentation: capture all investigative, response, and remediation activities within the case management platform Ensure each case includes a detailed triage, captured artifacts, and any IOCs to support clear tracking of security team efforts of associated tasks.

Los Angeles, CA30+ days ago

We are looking for a Security Engineer who is responsible for design, implement, and maintain systems to protect organizations from cyber threats, ensuring data confidentiality, integrity, and availability. • Security Infrastructure Management: Design and deploy firewalls, intrusion detection/prevention systems (IDS/IPS), and encryption protocols across on-premises and cloud environments.

Orange, CA20 days ago

$125,000–$175,000 Per Year

Hands-on experience in threat hunting required (examples: MITRE ATT&CK, TTPs, Cyber Kill Chain, Diamond Model of Intrusion Analysis, Indicators of Compromise / IOCs, Indicators of Attacks (IOAs), etc.). KORE1, a nationwide provider of staffing and recruiting solutions, has an immediate opening for a Security Engineer: Red / Blue team (Azure Security, ethical hacker/pentesting, MXDR, SIEM, DLP req); CEH a + .

Santa Ana, California7 days ago

$126,000–$160,000 Per Year

At Unified Door & Hardware Group (UDHG), Cloud & Security Engineer is responsible for managing and supporting the organization’s cloud, infrastructure, and security environments with a strong focus on Microsoft Azure, Microsoft 365, and compliance-driven operations. Following the recent acquisition of FBM by Lowe’s, the organization continues to invest in strong, forward-thinking talent to support national growth, enhance customer experience, and drive long-term success across both businesses.

Sacramento, CA30+ days ago

$41.97–$72.62 Per Hour

The ideal candidate has experience as a former Qualified Security Assessor (QSA) or Internal Security Assessor (ISA) and possesses deep technical expertise in securing cardholder data environments (CDEs). Job Summary : The PCI Security Analyst / Technical Engineer is responsible for supporting PCI DSS compliance initiatives from both a technical and operational perspective.

San Diego, CA9 days ago

$123,000–$145,000

Manage Faro's vulnerability management program, including triaging findings from infrastructure scans, SAST, DAST, and SCA tools, tracking remediation against established SLAs and coordinating with engineering on fixes. Contribute to the security of Faro's AI-powered products, including evaluating risks related to prompt injection, data leakage between tenants, model output safety, and retrieval-augmented generation (RAG) integrity.

Irvine, CA30+ days ago

This position is responsible for assessing, designing, developing, demonstrating, positioning, provisioning, and implementing enterprise security services and solutions; as well as providing ongoing support to Nth Generation's clients, using the best tools, techniques, and products that our clients demand today. Performs the role of a Virtual Chief Information Security Officer (vCISO), assessing the organization's security posture, providing a prioritized security remediation roadmap, leading security initiatives, and providing security expertise and expert thought leadership.

San Jose, CA21 days ago

$155,800–$224,200

Technical Proficiency: Strong knowledge of security frameworks (e.g., NIST, ISO 27001) and proficiency in security technologies such as firewalls, intrusion detection systems, SIEM, SOAR, XDR, Email Security, DLP, CASB, CNAPP, Vulnerability Scanning, Threat Intelligence and automated Penetration Testing. Our cutting-edge solutions enable unparalleled “time-to-power” capabilities, reliability, and sustainability, ensuring our customers remain ahead in a world where soaring energy demand and intensifying energy scarcity are rapidly becoming the new norm.

San Jose, CA21 days ago

$155,800–$224,200

Sacramento, CA30+ days ago

DESIRABLE QUALIFICATIONS: ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Certified – Governance Risk and Compliance (CGRC) or Certified Authorization Professional (CAP), ISACA Certified Information Security Manager (CISM), ISACA Certified in Risk and Information Systems Control (CRISC), CompTIA Certified Advanced Security Practitioner (CASAP+), CompTIA Security+. ZTA implementation roadmap (Plan, Schedule, and Decks), Cybersecurity Program and Architecture Risk Review and architect and engineer support for Zero Trust Architecture (ZTA) implementation activities .

San Jose, CA30+ days ago

$133,400–$185,000 Per Year

Telemetry & Data Protection: safeguard critical flight telemetry and sensitive data pipelines through robust encryption, key management (KMS/HSM), and data loss prevention (DLP) strategies. Security Tooling: Experience implementing and tuning CSPM/CNAPP tools (e.g., Wiz, Prisma Cloud, Orca, Sysdig) and SIEM platforms (Tenex, Splunk, Datadog Security).

San Jose, CA30+ days ago

Palo Alto, CA30+ days ago

$135,200–$202,800 Per Year

Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information. Proven track record of utilizing frontier models to build agentic workflows that scale security operations, successfully automating the end-to-end lifecycle of vulnerability discovery and remediation.

San Jose, CA14 days ago

$50–$51 Per Hour
Contractor

Certifications (Preferred): * PCNSE (Palo Alto Certified Network Security Engineer) ACCP (Aruba Certified ClearPass Professional)CCNP Security or Routing & Switching FireMon Core/Policy Manager Certification Our client is a leading IT Industry, and we are currently interviewing to fill this and other similar contract positions. Core Infrastructure: Manage enterprise-scale Route and Switch environments, specifically focusing on Edgecore open networking hardware and Infoblox for DDI (DNS, DHCP, and IPAM).

San Francisco, CA30+ days ago

As a Senior Cloud Security Engineer at Braze, you will work on a diverse set of initiatives, including: Working closely with Infrastructure, SRE, and Product Engineering to design secure cloud architectures and develop practical, scalable security controls for new and existing services. Braze was also named a 2025 Best Companies To Work For by U.S. News & World Report, a 2025 America’s Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology™ by Great Place To Work®, among other accolades.

San Francisco, CA30+ days ago

$171,000–$260,000 Per Year

As a Senior Lead Security Engineer at JPMorganChase within the Cybersecurity and Technology Controls line of business, you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Menlo Park, CA30+ days ago

The scale, diversity, and importance of the products we secure demands an innovative, AI-driven approach -- come help us make life hard for the bad guys using cutting-edge AI!Meta’s Product Security team is hiring security interns focused in the following areas:Web Security: focused on securing web applications/APIs and ensuring we have robust architectural browser protections. Meta's Product Security team focuses on detection, prevention, and mitigation of risk that is inherent in building software through an AI-first lens -- leveraging machine learning, automation, and intelligent systems to revolutionize how we approach vulnerability research and secure software development.

San Diego, CA30+ days ago

Our Software Engineering (R&D) department in our Diagnostics division is looking for a Security Engineer experienced in medical device and/or instruments security and systems to join our team, pivotal in building and enhancing security in our products and services! + Maintain vigilance on industry security threats, assess risks to Hologic products, and manage these risks according to established quality procedures.

Corona del Mar, CA30+ days ago

Remote

GCP Security Architecture: Lead the design of security controls within Google Cloud Platform, specifically for Vertex AI, BigQuery, VPC Service Controls, IAM, and Security Command Center. Incident Response: Lead the technical response to complex security incidents, using SQL/KQL to query logs and forensics data to ensure rapid recovery and root cause elimination.

New!

Fountain Valley, CA3 days ago

Remote

$75–$85 Per Hour

Work authorization: Due to the nature of the work and access to Controlled Unclassified Information (CUI) in support of U.S. Department of Defense-related programs, candidates must qualify as a U.S. Person (USPER), including U.S. Citizens, U.S. Nationals, or Lawful Permanent Residents (Green Card holders), and must meet all applicable requirements for access to CUI-regulated environments. KORE1, a nationwide provider of staffing and recruiting solutions, has an immediate opening for a Network Security Engineer / Architect (Fortinet, FortiGate, Enterprise IT, Segmentation & Zero Trust) - CUI Environment / US Persons Only.

Los Angeles, CA30+ days ago

This role provides the opportunity to work on cutting-edge GPU cloud technologies, tackle complex security challenges at scale, and directly enhance the resilience and trustworthiness of our infrastructure and services. Vast.ai is a market based cloud computing platform focused on reducing the cost and friction of compute-intensive workloads, enabling anyone to easily leverage large-scale GPU liquidity.

Los Angeles, CA30+ days ago

3 plus years of experience in Spunk (SIEM) Security Enterprise: architecting, configuring, deploying, and customizing the tool, preferably both in supporting the application and utilizing the application for information security monitoring, incident response, and compliance. Configuration of Correlation Searches, Dashboard Searches, Risk Modifiers, Threat Intelligence Feeds, Workflow Actions and Enterprise Security content.

Emeryville, CA30+ days ago

$200,000–$280,000 Per Year

The Senior Manager blends deep technical expertise in network architecture, cloud networking (AWS), and cybersecurity with hands-on people management to deliver secure, resilient, and scalable connectivity across all production and corporate sites. Furthermore, this digital platform is fully programmable in the way 3D printing is digital—but whereas 3D printing produces parts of a single material using a single process, the Matter Compiler technology platform is a multi-process, multi-material system: bits and raw materials go in, and complete, functional micromachines come out.

San Jose, California24 days ago

You'll engage in technical analysis, define comprehensive security use cases, and leverage a broad spectrum of technologies to drive secure system solutions across silicon, hardware, platform, firmware, and software, aiming to deliver exceptional customer experiences.   . Expert knowledge of a broad spectrum of datacenter security technologies including secure boot, secure update, attestation, confidential compute, and trusted execution environment (TEE) architecture.

Long Beach, CA30+ days ago

$120,000–$175,000 Per Year
Full-time

Important information: FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY: To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Our Space Systems business designs and builds our extensive line of satellites, payloads, and their components, including spacecraft that have been selected to support NASA missions to the Moon and Mars and components used on the James Webb Space Telescope.

Burbank, CA30+ days ago

$129,300–$173,300 Per Year

Walt's passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Our mission is to continuously assess, challenge, and strengthen our organization's security through innovative automated solutions and detecting, preventing, and reducing technology-based risk from source code and mobile applications.

Palo Alto, CA30+ days ago

$140,000–$180,000 Per Year

You will help identify and manage potential incidents and work with partner teams on known or suspected security threats. You will support threat intelligence, threat hunting, intrusion detection, and incident response efforts that adhere to, and push forward, best practices.

Fullerton, CA25 days ago

Systems Security Engineering creates holistic security solutions leveraging Cyber Security, Software Assurance and Supply Chain Risk Management to support Program Protection Implementation on embedded weapons systems. Understanding of Systems Engineering requirements, specifications, and Experience implementing DoD and Federal IA Certification and Accreditation Processes, IA controls and developing and maintaining associated certification and accreditation documentation.

Irvine, CA30+ days ago

Full-time

The role requires practical experience working across AWS, Azure, and GCP environments, with a strong emphasis on ensuring cloud-native and third-party logging is consistently integrated into centralized log management and SIEM platforms to support security monitoring, detection, and incident response. Technical Expertise: Working knowledge of Cloud identity and access management, Cloud-native logging and monitoring services, and Common cloud security misconfigurations and threats.

Monterey, CA23 days ago

$130,000–$149,000 Per Year

JASINT participates in E-Verify and will provide the federal government with I-9 information to confirm that all new hires are authorized to work in the U.S. To learn more about E-Verify, please visit dhs.gov/e-verify. This role involves translating technology and environmental conditions, such as laws and regulations, into effective security designs and processes, with a focus on implementing Zero Trust principles.

Irvine, CA30+ days ago

$120,000–$135,000 Per Year

KORE1, a nationwide provider of staffing and recruiting solutions, has an immediate opening for a Security Engineer: Systems Engineer (Windows server, AWS IAAS migration), EntraID, Defender, Intune, Sentinel, SIEM, & DLP. Implement and optimize Microsoft Security tools, including but not limited to Microsoft Defender for Endpoint, Defender for Office 365, Sentinel, Microsoft Purview, and Entra ID Protection.

New!

Mountain View, CA2 days ago

$139,900–$274,800 Per Year

Own the model security roadmap: Define and prioritize the security hardening strategy for our frontier models across the full OWASP LLM threat surface — prompt injection (direct and indirect), data exfiltration, jailbreak resistance, system prompt leakage, training data extraction, and adversarial manipulation of agentic workflows. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

New!

Sunnyvale, CA4 days ago

Full-time
Employee

As part of an entrepreneurial team in this rapidly growing business, you will play a key role in understanding the needs of our customers and help shape the future of businesses of all sizes use technology to connect with customers, employees and partners. Preferred qualifications: Experience selling technical solutions in one or more of the following: infrastructure modernization, application modernization, data management, data analytics, cloud AI, networking, migrations, security.

Los Angeles, CA30+ days ago

Unlike junior roles that focus on monitoring, the "Senior" level requires leading large-scale architecture projects, mentoring junior staff, and automating security responses to keep pace with AI-speed attacks. NetworkingDeep knowledge of Zero Trust Network Access (ZTNA), BGP, and Software-Defined Perimeter (SDP).Defensive OpsExpertise in SOAR (Security Orchestration, Automation, and Response) and XDR platforms.

Resume Resources

Free Resume Templates Free Resume Builder

Get noticed by top employers!

Upload your resume to let employers know you're open to Penetration Tester job opportunities. Plus, receive relevant job recommendations in your inbox.

Penetration Tester Jobs in California

Application Security Engineer Jobot

Sr Security Architect (100% onsite) Agile Global Solutions, Inc.

Security Engineer III Pinnacle Technical Resources

SR. Security Architect ECLARO

Information Security Analyst Vaco LLC

Security Engineer Vaco LLC

Senior Security Architect aap3

Security Engineer ECLARO

Sr. Product Security Engineer Ekman Associates, Inc

Avionics Penetration Tester - Midlevel Astrion

Penetration Tester, Web/Mobile Apps and Cloud Services TP-Link Systems Inc.

Web Application Penetration Tester Blackstone Talent Group

Penetration Tester, Embedded Devices TP-Link Systems Inc.

Application Penetration testers /Dynamic Application Security Testing (DAST) Syntricate Technologies Inc

Security Engineer Eliassen Group

Senior Offensive Security Engineer FocusKPI Inc.

Security Specialist Viasat, Inc.

Security Engineer Red Cup IT, Inc.

Security Engineer: Red / Blue team (Azure Security, ethical hacker/pentesting, MXDR, SIEM, DLP req); CEH a + KORE1 Technologies

Cloud & Security Engineer Unified Door and Hardware Group

PCI Security Architect / InfoSec Engineer Baylor Scott & White Health

Senior Security Engineer Faro Health Inc.

Senior Security Consultant - Southern California - North OC/LA Nth Generation

Principal, Security Engineer SOC BloomEnergy

Principal, Security Engineer BloomEnergy

Security Architect / Engineer - Zero Trust Architecture WaveStrong, Inc.

Enterprise Cloud Security Engineer Archer

Senior Enterprise Application Security Engineer Archer

Application Security Engineer Rubrik

Network Security Engineer Pyramid, Inc

Senior Cloud Security Engineer Braze

Senior Lead Security Engineer - AI Infra Platform JPMorgan Chase

Product Security Engineer, Intern Meta

Lead Product Security Engineer (R&D Cytology) Hologic

Security Architect Tebra

Network Security Engineer / Architect (Fortinet, FortiGate, Enterprise IT, Segmentation & Zero Trust) – CUI - US Persons ONLY KORE1 Technologies

Security Engineer Vast.ai

Splunk SIEM Security Engineer/Architect WaveStrong, Inc.

Senior Manager - Network and Information Security Atomic Machines

AI System Security Architect Advanced Micro Devices, Inc

Senior CyberSecurity Engineer I/II Rocket Lab USA

Senior Security Engineer, Product Security The Walt Disney Company (Corporate) Careers

Security Engineer - Detection & Response xAI

Principal System Security Engineer Apollo Professional Solutions

10872 - Cloud Security Engineer I - Engineering Hyundai Autoever America

Security Architect JASINT

Security Engineer: Systems Engineer (Windows server, AWS IAAS migration), EntraID, Defender, Intune, Sentinel, SIEM, & DLP KORE1 Technologies

Principal Product Manager, AI Model Security Microsoft

Platform Customer Engineer, Strategic AI and ISV Google

Senior Security Engineer Red Cup IT, Inc.

Resume Resources

Similar Job Searches