1

Phishing Simulation Jobs in California (NOW HIRING)

Familiarity with phishing simulations (e.g., Hoxhunt) and security awareness programs. * Ability to manage multiple priorities and deliver in a fast-paced environment. * Action-oriented, high-energy ...

Security Engineer

Yuba City, CA · On-site

$120K - $145K/yr

... phishing simulation and security awareness training program. 5. Assist with cybersecurity incident investigations and response activities, including threat triage, containment, remediation, root ...

Own day-to-day GRC operations - including (but not limited to) user access reviews and certifications, security awareness and phishing/deepfake simulation facilitation, JML tracking, and triage and ...

Security Engineer

Yuba City, CA · On-site

$120K - $145K/yr

... phishing simulation and security awareness training program. 5. Assist with cybersecurity incident investigations and response activities, including threat triage, containment, remediation, root ...

Security Engineer

Yuba City, CA · On-site

$120K - $145K/yr

... phishing simulation and security awareness training program. 5. Assist with cybersecurity incident investigations and response activities, including threat triage, containment, remediation, root ...

... phishing simulation campaigns. • Support the development, testing, and ongoing improvement of Disaster Recovery plans to ensure the organization can effectively respond to and recover from ...

... phishing simulation campaigns • Support the development, testing, and ongoing improvement of Disaster Recovery plans to ensure the organization can effectively respond to and recover from ...

Senior Security Operations Analyst

Los Angeles, CA · On-site

$103K - $135K/yr

... the phishing simulation and security awareness program, schedule and manage campaigns, track completion rates, report results to leadership, and follow up with repeat offenders or high-risk user ...

Own day-to-day GRC operations including user access reviews and certifications, security awareness and phishing/deepfake simulation facilitation, JML tracking, and triage and enforcement of policy ...

next page

Showing results 1-20

Phishing Simulation information

What are some common challenges faced by professionals running phishing simulation programs, and how can they be addressed?

Professionals managing phishing simulation programs often encounter challenges such as employee resistance, maintaining engagement, and ensuring simulations stay relevant to evolving threats. To address these, it's important to communicate the purpose of simulations clearly, provide timely feedback and education, and regularly update campaigns to reflect current phishing tactics. Collaborating closely with IT, HR, and leadership teams helps foster a culture of security awareness and ensures the program's effectiveness.

What is a phishing simulation?

A phishing simulation is a cybersecurity exercise where organizations send fake phishing emails to employees to test their ability to recognize and report malicious messages. The goal is to raise awareness about phishing tactics and improve employees' responses to real threats. These simulations help identify vulnerabilities within the organization and guide future training efforts to reduce the risk of successful phishing attacks.

What is the difference between Phishing Simulation vs Security Analyst?

AspectPhishing SimulationSecurity Analyst
CredentialsCertifications like CEH, CompTIA Security+Certifications like CISSP, CISA, CEH
Work EnvironmentTypically in cybersecurity teams, focusing on training and awarenessIn IT/security departments, analyzing threats and implementing security measures
Employer & IndustryUsed by organizations to test employee awareness in cybersecurityEmployed by organizations to protect IT infrastructure and respond to security incidents

While both roles are part of cybersecurity, Phishing Simulation focuses on testing and training employees against phishing attacks, whereas Security Analysts monitor, analyze, and respond to security threats within an organization.

What are the key skills and qualifications needed to thrive as a phishing simulation specialist, and why are they important?

To thrive as a Phishing Simulation Specialist, you need a solid understanding of cybersecurity principles, social engineering tactics, and experience with security awareness training programs, usually backed by a degree in information security or related certifications like CEH or CISSP. Familiarity with phishing simulation platforms (e.g., KnowBe4, Cofense), email security systems, and data analytics tools is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for designing realistic scenarios and educating users. These skills and qualifications are essential for helping organizations identify vulnerabilities, reduce human risk, and strengthen their overall security posture.
What job categories do people searching Phishing Simulation jobs in California look for? The top searched job categories for Phishing Simulation jobs in California are:
What cities in California are hiring for Phishing Simulation jobs? Cities in California with the most Phishing Simulation job openings:

Tabletop / Phishing Exercise Facilitator

Xtreme Solutions Corporate

San Bernardino, CA • On-site

Full-time

This job post has expired 2 days ago. Applications are no longer accepted.


Job description

Description:

Position Summary

Designs and facilitates cybersecurity tabletop exercises (Blue/Red/Purple team), phishing simulation campaigns, and security awareness campaigns for Departments selecting these buffet-style services.


Key Responsibilities

• Design and facilitate tabletop exercise scenarios tailored to department risk profiles.

• Plan and execute phishing simulation campaigns and analyze results.

• Design and/or deliver security awareness campaign content.

• Conduct social engineering assessments where selected (phishing, vishing, physical intrusion testing).

Requirements:

Required Qualifications

• 3+ years facilitating incident response tabletop exercises or phishing simulation programs.

• Strong presentation and facilitation skills for mixed technical/executive audiences.


Preferred Qualifications

• Experience with commercial phishing simulation platforms.

• CTEP (Cybersecurity Tabletop Exercise Practitioner) or similar credential.


Travel

Onsite for live exercise facilitation; remote for design and analysis. Engaged on demand.