ZipRecruiter

Log In

2

Remote Pentest Jobs in California (NOW HIRING)

All JobsPentest JobsRemote Pentest JobsRemote Pentest Jobs in California

Remote Pentest information

What is a remote pentest?

A Remote Pentest, or remote penetration test, is a security assessment where ethical hackers evaluate the vulnerabilities of an organization's IT systems from a location outside of the physical premises. This process simulates cyberattacks to identify and exploit weaknesses in networks, applications, or other digital assets, all conducted over the internet. Remote pentesting helps organizations discover security gaps that could be exploited by real attackers, enabling them to strengthen their defenses without the need for on-site visits. It is an efficient and cost-effective way to assess security, especially for companies with remote or distributed infrastructures.

What are the key skills and qualifications needed to thrive as a remote pentester, and why are they important?

To thrive as a Remote Pentester, you need a strong background in network security, vulnerability assessment, and ethical hacking, often supported by a degree in computer science or cybersecurity and relevant certifications like OSCP or CEH. Familiarity with penetration testing tools such as Metasploit, Burp Suite, and Nmap, as well as secure remote collaboration platforms, is essential. Strong problem-solving skills, attention to detail, and effective written communication are crucial soft skills for documenting findings and advising clients remotely. These competencies are vital for identifying security risks, delivering actionable insights, and maintaining client trust in a distributed work environment.

What are some common challenges faced by remote pentesters, and how can they overcome them?

Remote pentesters often encounter challenges such as limited direct access to client environments, communication barriers with client teams, and ensuring secure handling of sensitive data. To overcome these, they typically use VPNs and secure remote desktop tools, maintain clear and regular communication through scheduled meetings and detailed reporting, and follow strict data protection protocols. Building strong relationships with client IT teams and staying updated on remote testing best practices also help ensure effective and compliant assessments.

What is the difference between Remote Pentest vs Vulnerability Analyst?

AspectRemote PentestVulnerability Analyst
CertificationsOSCP, CEH, GPENOSCP, CEH, CISSP
Work EnvironmentProject-based, client sites or remoteOffice or remote, mainly analysis-focused
Industry UsageCybersecurity, consulting firmsIT departments, security teams
Job FocusSimulating attacks to find vulnerabilitiesIdentifying and prioritizing security weaknesses

Remote Pentests involve actively testing systems for vulnerabilities through simulated attacks, often requiring offensive skills. Vulnerability Analysts focus on identifying and assessing security flaws, typically through scanning and analysis. While both roles require cybersecurity knowledge and certifications like OSCP or CEH, Remote Pentesters are more offensive and hands-on, whereas Vulnerability Analysts are more analytical and reporting-oriented.

What are the most commonly searched types of Pentest jobs in California?

The most popular types of Pentest jobs in California are:

What are popular job titles related to Remote Pentest jobs in California?

For Remote Pentest jobs in California, the most frequently searched job titles are:

What job categories do people searching Remote Pentest jobs in California look for?

The top searched job categories for Remote Pentest jobs in California are:

What cities in California are hiring for Remote Pentest jobs?

Cities in California with the most Remote Pentest job openings:

Remote Pentest jobs near you
Infographic showing various Remote Pentest job openings in California as of August 2026, with employment types broken down into 93% Full Time, 2% Part Time, and 5% Contract. Highlights an 65% Physical, 9% Hybrid, and 26% Remote job distribution.

OCI - Security Services Manager - US (Remote)

Xgrid.co

San Jose, CA • Remote

Full-time

Re-posted 7 days ago

Job description

Xgrid Inc (www.xgrid.co) is a cloud services tech firm headquartered in Silicon Valley, USA, specializing in providing expert consultancy and professional services in building secure, complex, large-scale, production-grade distributed systems in cloud environments (AWS | Google Cloud Platform | Azure). The architects of the Xgrid cloud business group have 20+ years of combined experience building production-grade hyperscale systems for top silicon valley tech companies including Amazon, Salesforce, VMware, Cisco, and multiple top startups with successful exits.

We're looking for a Security Services Manager to join our team and play a key role in delivering high-value, high-impact security and compliance services to our Oracle Cloud customers. You'll leverage your experience in customer-facing roles and your knowledge of cybersecurity controls, especially within cloud technology, to ensure our clients' success in the cloud. This is a great opportunity to make a real difference for businesses migrating to or already using Oracle Cloud.


What will you do:


Responsibilities include but not limited to:

  • Act as an expert advisory contact and assist with deployment and ongoing management of a number of Enhanced Security Services for example (but not limited to):


  • Threat & vulnerability management, such as vulnerability scanning & penetration tests

  • Database security solutions such as Encryption, Vaulting and Auditing

  • Data obfuscation solutions such as Data masking & Data Redaction

  • Assess application layer security assessments and secure configuration best practices

  • Implement & support Validation Support Services for healthcare industries

  • Chair & Participate in periodic security service review calls with customer and clearly demonstrate value proposition of delivered security services

  • Develop customer success metrics, cultivate enduring relationships with customers from initial onboarding through their cloud transition journey, fostering business growth; key success criteria

  • Create & maintain up to date customer & service status information pertaining to security services in relevant reporting portals, applications etc. at all times

  • Analysis of the vulnerability scan and PenTest data and provide customer walkthrough using tailored & “fit-for-purpose” deck; clearly articulating service value, findings, associated risks & remediation

  • Assist and be part of a “center of excellence” (CoE) team in presentation of security service value decks using effective metrics such as balance score card (BSC) to customer business team, who could be non-technical or higher management / Cxx level


Required Skills


  • Intermediate to expert level knowledge of Cloud Computing

  • Knowledge of Oracle Linux, such as basic navigation, security patch analysis, security best practice configuration etc.

  • Knowledge of Windows server security, such as common vulnerabilities, configuration weaknesses & security best practices

  • Possess deep level knowledge on Computer System Validation (CSV), GAMP 5 Guideline, USFDA - 21 CFR Part 11, GxP Regulations, Validation Life Cycle, ‘V’ model,  Good Documentation Practices (GDP), Software Development Life Cycle (SDLC) and Deft Life Cycle Management

  • Prepare, review and execute validation documentation like System Design Document (SDD), Installation Qualification (IQ) Plan/Protocol, Test Cases     and Summary Reports

  • Perform Quality Review and oversee the validation activities with respect to Good Documentation Practices (GDP) and 21 CFR Part 11 regulations

  • Knowledge of Oracle Database security best practices, Database Auditing etc

  • Knowledge of Oracle Fusion Middleware security best practices, API & web security, OWASP Top 10 and associated controls etc.

  • Knowledge of two or more industry best practice standards & framework such as CIS, NIST, STIG, FedRAMP, PCI DSS, HIPAA & 21 Part 11

  • Knowledge of scanning tools such as Nessus, Qualys etc. or other such and ability to interpret scan data, findings severity, CVSS score etc.

  • Exemplary customer management skills

Preferred Skills:


  • Able to write basic to intermediate Oracle Linux shell scripts 

  • Knowledge of Oracle Cloud Infrastructure security concepts, ZTA and CSA Cloud Controls Matrix (CCM)

  • Knowledge of Identity & Access management solutions, SAML, SCIM, hybrid cloud identity source integrations, federation, roles & policies etc.

  • Able to read and understand services contracts, order documents and its associated entitlements & obligations.

  • Excellent Project management skills

  • Possess current Oracle Cloud Infrastructure certifications



Levels: ALL
Years Of Experience: Junior: 0-3 YoE, Mid: 3-6 YoE, Senior: 6+ YoE
Location: US (Remote)
Estimated Annual Salary: 105K - 196K USD / year

Number of Positions: 1
Position Type: Fixed Term, 200 Days 

Apply