ZipRecruiter

Log In

2

Remote Penetration Test Jobs in California (NOW HIRING)

Medvidi

Information Security Officer

San Jose, CA · On-site +1

... remote-work ePHI handling. * Own the security incident response process, including detection ... Coordinating an annual penetration test and ensuring findings are incorporated into the remediation ...

Pair Team

Senior Security Engineer

San Francisco, CA · Remote

$134K - $185K/yr

... remote position reporting up to the IT Lead. What You'll Do * Own vulnerability management, dependency security, threat modeling, security code reviews, and remediation of penetration test findings.

Vercel

Product Security Engineer

San Francisco, CA · On-site +1

... penetration testing. A software engineer with a strong desire to move into security, or a security ... If you're located beyond that distance, the role is fully remote. For location-specific details ...

LHH US

Account Manager - Composites - West

Azusa, CA · Remote

$120K - $150K/yr

Lead initiatives designed to increase market penetration, improve margins, and drive product ... Remote opportunity with responsibility for a high-impact territory across the Western Region.

LHH US

Account Manager - Composites - West

Azusa, CA · Remote

$120K - $150K/yr

Lead initiatives designed to increase market penetration, improve margins, and drive product ... Remote opportunity with responsibility for a high-impact territory across the Western Region.

AbacusNext

Director, Payments

San Diego, CA · On-site +1

$170K - $200K/yr

Remote • Reports to: CFO • Travel: occasional About the Role We're looking for a Director ... and test switching incentives with Finance. * Diagnose why merchants revert to a competing ...

All JobsPenetration Test JobsRemote Penetration Test JobsRemote Penetration Test Jobs in California

Remote Penetration Test information

What is the difference between Remote Penetration Test vs Vulnerability Analyst?

AspectRemote Penetration TestVulnerability Analyst
CertificationsOSCP, CEH, GPENCompTIA Security+, CISSP, CEH
Work EnvironmentHands-on testing, simulated attacksVulnerability scanning, risk assessment
Industry UsageCybersecurity firms, IT departmentsSecurity teams, consulting firms

Remote Penetration Testers focus on actively exploiting vulnerabilities to assess security defenses, while Vulnerability Analysts identify and prioritize security weaknesses through scanning and analysis. Both roles require similar certifications and often work within the same industry environments, but their core activities differ: penetration testing involves active exploitation, whereas vulnerability analysis emphasizes detection and reporting.

What are the most commonly searched types of Penetration Test jobs in California?

The most popular types of Penetration Test jobs in California are:

What are popular job titles related to Remote Penetration Test jobs in California?

For Remote Penetration Test jobs in California, the most frequently searched job titles are:

What job categories do people searching Remote Penetration Test jobs in California look for?

The top searched job categories for Remote Penetration Test jobs in California are:

What cities in California are hiring for Remote Penetration Test jobs?

Cities in California with the most Remote Penetration Test job openings:

Remote Penetration Test jobs near you
Infographic showing various Remote Penetration Test job openings in California as of August 2026, with employment types broken down into 1% As Needed, 80% Full Time, 14% Part Time, 4% Contract, and 1% Nights. Highlights an 92% Physical, 1% Hybrid, and 7% Remote job distribution.

Information Security Officer

Medvidi

San Jose, CA • On-site, Remote

Full-time

Posted 6 days ago

Job description

Description
About MEDvidi
MEDvidi is a multi-state telehealth practice delivering behavioral health and psychiatric services through a licensed Professional Corporation structure. As our organization and provider workforce continue to grow, protecting highly sensitive behavioral-health information and maintaining a strong, operational HIPAA security program are critical to our continued success.
We are seeking an experienced Information Security Officer (ISO) to own and operate MEDvidi's HIPAA Security Program.
About the Role
The Information Security Officer will have end-to-end ownership of MEDvidi's information security program, with particular responsibility for safeguarding electronic protected health information (ePHI).
You will inherit a completed Security Risk Analysis and be responsible for turning identified risks and recommendations into a sustainable operating program. This includes remediation execution, ongoing risk management, technical and administrative safeguards, vendor security, incident response, security policies, and security compliance.
This is a hands-on ownership role for someone comfortable independently running a security program in a lean, fast-moving healthcare environment.
Responsibilities
Key Responsibilities
  • Serve as MEDvidi's designated HIPAA Security Official under 45 CFR § 164.308(a)(2).
  • Own the organization's security risk analysis and ongoing risk-management cycle, including maintaining the risk register and driving remediation items to closure.
  • Develop, operate, document, and maintain HIPAA administrative safeguards, including workforce security, access authorization, security awareness and training, incident procedures, and contingency planning.
  • Partner with IT to implement and maintain technical safeguards involving access controls, authentication, audit controls, data integrity, logging, and encryption of ePHI in transit and at rest.
  • Maintain security policies for MEDvidi's distributed workforce, including workstation security, device and media controls, and remote-work ePHI handling.
  • Own the security incident response process, including detection, containment, forensics coordination, documentation, and annual tabletop exercises.
  • Partner with the Privacy Officer on breach investigations and other areas where privacy and security requirements overlap.
  • Lead vendor and Business Associate security diligence, including security questionnaires, SOC 2/HITRUST reviews, subcontractor risk, and remediation of security findings.
  • Support security architecture and tooling decisions involving telehealth platforms, EHR access, endpoint management, logging, and SIEM coverage.
  • Review the security implications of AI tools and AI-assisted security and compliance processes used within the organization.
  • Manage and operate MEDvidi's GRC platform in partnership with Compliance leadership.
  • Monitor changes to the HIPAA Security Rule and help MEDvidi assess and implement new requirements as they become applicable.

Requirements
Required Qualifications
  • 6+ years of information security experience.
  • 2+ years of experience in healthcare or another regulated ePHI/PII environment.
  • Demonstrated hands-on ownership of a HIPAA security program or equivalent regulated security program; advisory-only experience is not sufficient.
  • Strong working knowledge of the HIPAA Security Rule.
  • Working knowledge of at least one relevant security/control framework, such as:
  • NIST Cybersecurity Framework (CSF) 2.0
  • NIST SP 800-66r2
  • HITRUST
  • Demonstrated ability to independently run a security program in a lean environment.
  • Strong risk-based prioritization, practical control implementation, and security documentation skills.

Preferred Qualifications
  • CISSP, HCISPP, CISM, or equivalent certification.
  • Experience securing telehealth platforms or other healthcare technology environments.
  • Cloud security experience with AWS, Azure, and/or GCP.
  • Experience leading security incident response.
  • Experience working with fractional or external security resources, penetration testers, and independent security advisors.
  • Familiarity with evolving HIPAA Security Rule requirements.

What Success Looks Like
During your first year, you will be expected to establish a mature, well-documented, and operational security program. Key outcomes include:
  • Closing Security Risk Analysis remediation items or placing them on documented, formally accepted remediation schedules.
  • Maintaining a security policy suite mapped to applicable HIPAA safeguards, with clear owners, review cadences, and evidence.
  • Testing the incident response plan through a tabletop exercise.
  • Maintaining workforce security training completion of at least 95%.
  • Completing security reviews for critical vendors handling ePHI.
  • Coordinating an annual penetration test and ensuring findings are incorporated into the remediation program.

Why Join MEDvidi?
This is an opportunity to take genuine ownership of information security within a growing multi-state behavioral healthcare organization. Rather than serving solely as an advisor, you will have the mandate to build, operate, improve, and demonstrate the effectiveness of the security program while working closely with Compliance, Privacy, IT, and organizational leadership.
If you are an experienced healthcare security professional who enjoys translating regulatory requirements and risk assessments into practical, sustainable security operations, we would like to hear from you.
Apply today to join MEDvidi as our Information Security Officer.

Apply