ZipRecruiter

Log In

1

Exploit Development Jobs in California (NOW HIRING)

STR

Senior Reverse Engineer

San Diego, CA · On-site

$134K - $184K/yr

Performing vulnerability weaponization, exploit development, payload development, and exploit mitigation on a variety of challenging targets * Documenting, demonstrating, and presenting research

Mercor

AI Safety Expert - Bilingual

San Francisco, CA · Remote

$17 - $25/hr

Background in Cybersecurity : penetration testing, exploit development, reverse engineering. * Knowledge of socio-technical risk: harassment/disinfo probing, abuse analysis, conversational AI testing.

STR

Senior Reverse Engineer

San Diego, CA · On-site

$110K - $152K/yr

... development, and exploit mitigation on a variety of challenging targets • Documenting, demonstrating, and presenting research • Solving real world problems that have an impact on national ...

STR

Principal Software Reverse Engineer

San Diego, CA · On-site

... exploit development, payload development, and exploit mitigation on a variety of challenging targets • Technical marketing to existing and potential customers • Technical proposal development ...

STR

Senior Reverse Engineer

San Diego, CA · On-site

... development, and exploit mitigation on a variety of challenging targets • Documenting, demonstrating, and presenting research • Solving real world problems that have an impact on national ...

next page

Showing results 1-20

All JobsExploit Development JobsExploit Development Jobs in California

Exploit Development information

See California salary details

$18

$37

$75

How much do exploit development jobs pay per hour?

As of Aug 25, 2026, the average hourly pay for exploit development in California is $37.11, according to ZipRecruiter salary data. Most workers in this role earn between $25.62 and $53.61 per hour, depending on experience, location, and employer.

What is exploit development?

An Exploit Development job involves researching software, hardware, or network vulnerabilities and creating proof-of-concept exploits to demonstrate security weaknesses. Professionals in this role analyze security flaws, write exploits, and sometimes assist in patch development. They often work in cybersecurity firms, government agencies, or red teams conducting penetration testing. Strong knowledge of low-level programming, reverse engineering, and debugging tools is essential.

What are some of the primary challenges encountered in exploit development?

Exploit Development professionals often face the challenge of staying ahead of rapidly evolving security defenses and continuously learning new attack techniques and mitigation strategies. The work can require intense focus and patience, as reverse engineering and identifying vulnerabilities in complex systems may take considerable time and persistence. Additionally, strict adherence to ethical guidelines and clear communication with cross-functional security and engineering teams is critical for responsibly handling discovered vulnerabilities. Diligence, adaptability, and ongoing professional development are key to navigating the technical and ethical complexities of this role.

What are the key skills and qualifications needed to thrive in exploit development, and why are they important?

To thrive in Exploit Development, you need advanced knowledge of computer systems, programming languages (such as C, C++, Python, or Assembly), and a deep understanding of cybersecurity principles, often supported by a degree in computer science or related field. Familiarity with reverse engineering tools (like IDA Pro, Ghidra, or OllyDbg), debuggers, and certifications such as OSCE or OSEP are commonly required. Strong problem-solving skills, attention to detail, and the ability to communicate complex technical findings clearly are valuable soft skills in this role. These skills and qualities are essential to responsibly discover and analyze security vulnerabilities, develop proof-of-concept exploits, and contribute to organizational or client security enhancements.

What are the most commonly searched types of Exploit Development jobs in California?

The most popular types of Exploit Development jobs in California are:

What are popular job titles related to Exploit Development jobs in California?

For Exploit Development jobs in California, the most frequently searched job titles are:

What job categories do people searching Exploit Development jobs in California look for?

The top searched job categories for Exploit Development jobs in California are:

Exploit Development jobs near you
Infographic showing various Exploit Development job openings in California as of August 2026, with employment types broken down into 1% As Needed, 86% Full Time, 11% Part Time, and 2% Contract. Highlights an 89% Physical, 3% Hybrid, and 8% Remote job distribution, with an average salary of $77,192 per year, or $37.1 per hour.

Senior Security Researcher

Palo Alto Networks, Inc.

Santa Clara, CA • On-site

$139.60 - $225.77/hr

Other

Posted 13 days ago

Job description

Job Summary

As a Senior Security Researcher, you will be at the forefront of cyber defense, focusing on vulnerability research, reverse engineering, and exploit development. You will leverage cutting‑edge AI models to create agentic defenders and autonomous systems for vulnerability discovery, validation, and remediation. Your work will involve deep‑dive analysis in areas such as Web Security, OS & Kernel Security, Software Supply Chain Security, OT/IoT security, participation in bug bounties, and contributing to the global security community through CVEs and research.

Key Responsibilities
  • Conduct advanced vulnerability research, reverse engineering, fuzzing, root‑cause analysis, and exploit development across various platforms.
  • Leverage Large Language Models and advanced ML techniques to automate and scale bug hunting across diverse domains, including Web, OS & Kernel, Software Supply Chain, OT/IoT, and Browser Security.
  • Use AI agents to accelerate PoC generation, exploitability analysis, and finding validation, with an emphasis on reducing false positives.
  • Design and deploy AI‑guided fuzzers, smart static/dynamic analysis tools, and autonomous agentic workflows specifically built for vulnerability research.
  • Develop and utilize agent harnesses for vulnerability discovery, PoC validation, patch validation, and defensive security research workflows.
  • Publish research, document findings, and contribute to the responsible disclosure of vulnerabilities (CVEs).
Required Qualifications
  • Bachelor’s degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
  • 3+ years of experience in offensive security, vulnerability research, or a similar role.
  • Demonstrated experience in reverse engineering, fuzzing, exploit development, or vulnerability root‑cause analysis.
  • Familiarity with penetration testing tools and methodologies, with emphasis on vulnerability discovery, exploitability assessment, and validation.
  • Strong knowledge of modern operating systems, network protocols, and application security.
Preferred Qualifications
  • Master’s degree or PhD in a relevant field.
  • Experience applying AI/ML models to cybersecurity challenges.
  • Knowledge of security in one or several of the following areas: Operational Technology (OT) or Internet of Things (IoT) systems, Web Security, OS & Kernel Security, Software Supply Chain Security, Browser Security.
  • A public track record of security research, such as conference presentations, publications, or CVEs.
  • Experience with model training, post‑training, or evaluation techniques such as Supervised Fine‑Tuning, Reinforcement Learning, RLHF, or security‑focused benchmark design.
  • Experience building AI agent harnesses, fuzzing harnesses, evaluation harnesses, or vulnerability validation workflows is a plus.
Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non‑sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus.

$139,600.00 - $225,775.00/yr

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No.

#J-18808-Ljbffr

Apply