ZipRecruiter

Log In

1

Vulnerability Manager Jobs in California (NOW HIRING)

GDH

Vulnerability Management Analyst

San Jose, CA · On-site

$68 - $73/hr

Role Summary A Vulnerability Management Analyst is responsible for supporting cybersecurity initiatives within critical infrastructure environments, specifically focusing on vulnerability ...

next page

Showing results 1-20

All JobsVulnerability JobsVulnerability Manager JobsVulnerability Manager Jobs in California

Vulnerability Manager information

See California salary details

$9

$21

$53

How much do vulnerability manager jobs pay per hour?

As of Jul 27, 2026, the average hourly pay for vulnerability manager in California is $21.61, according to ZipRecruiter salary data. Most workers in this role earn between $17.07 and $20.87 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Vulnerability Manager, and why are they important?

To thrive as a Vulnerability Manager, you need expertise in risk assessment, vulnerability scanning, and cybersecurity fundamentals, typically supported by a degree in information security or a related field. Familiarity with tools like Nessus, Qualys, and vulnerability management platforms, as well as certifications such as CISSP or CEH, is often required. Strong analytical skills, attention to detail, and clear communication are crucial soft skills for effectively identifying issues and coordinating remediation efforts. These abilities ensure that organizations can proactively manage security risks and maintain robust defense against cyber threats.

What is the difference between Vulnerability Manager vs Security Analyst?

AspectVulnerability ManagerSecurity Analyst
CertificationsCertified Vulnerability Assessor (CVA), CISSP, CEHCISSP, Security+, CEH
Work EnvironmentOversees vulnerability assessments, manages teams, develops strategiesMonitors security systems, analyzes threats, responds to incidents
Employer & Industry UsageUsed in cybersecurity teams across industries to manage vulnerabilitiesCommonly employed in security operations centers (SOCs) to analyze threats

While both roles focus on cybersecurity, Vulnerability Managers primarily oversee vulnerability assessments and strategy, whereas Security Analysts focus on monitoring and incident response. Both roles require relevant certifications and work within cybersecurity teams, but their daily responsibilities and focus areas differ.

What does a Vulnerability Manager do?

A Vulnerability Manager is responsible for identifying, assessing, and mitigating security vulnerabilities within an organization's systems, networks, and applications. They oversee vulnerability scanning, analyze the results, prioritize risks, and work with various teams to implement remediation strategies. Their goal is to reduce the organization's exposure to cyber threats by ensuring that security weaknesses are addressed promptly and effectively.

What are some common challenges faced by Vulnerability Managers when prioritizing remediation efforts?

Vulnerability Managers often encounter challenges in balancing limited resources with a high volume of identified vulnerabilities. Prioritizing remediation efforts requires close collaboration with IT, development, and business teams to assess the potential impact and exploitability of each vulnerability. Additionally, they must stay updated on emerging threats, ensure compliance with industry standards, and communicate risk effectively to both technical and non-technical stakeholders. Navigating these complexities is essential for maintaining a strong security posture while minimizing disruption to business operations.
What cities in California are hiring for Vulnerability Manager jobs? Cities in California with the most Vulnerability Manager job openings:
Vulnerability Manager jobs near you
Infographic showing various Vulnerability Manager job openings in California as of July 2026, with employment types broken down into 84% Full Time, 14% Part Time, and 2% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $44,942 per year, or $21.6 per hour.
Vulnerability Management Analyst

Vulnerability Management Analyst

GDH

San Jose, CA • On-site

$68 - $73/hr

Other

Posted 5 days ago

Job description

Role Summary
A Vulnerability Management Analyst is responsible for supporting cybersecurity initiatives within critical infrastructure environments, specifically focusing on vulnerability identification, analysis, and remediation. This role involves managing vulnerability scans, ensuring compliance with regulatory standards, and collaborating with cross-functional teams to maintain the security posture of operational assets. The position requires a proactive approach to safeguarding infrastructure and maintaining documentation for audit purposes.

Responsibilities

  • Conduct routine vulnerability scans using industry-standard tools such as Tenable, Tripwire IP360, and Qualys.
  • Analyze and validate scan results to identify critical vulnerabilities, collaborating with system and application owners to prioritize remediation efforts.
  • Track remediation activities, verify vulnerability closures through re-scanning, and document remediation progress.
  • Partner with infrastructure and application teams to ensure timely patching, configuration compliance, and security baseline adherence.
  • Support NERC CIP compliance efforts by maintaining accurate documentation, providing evidence, and generating compliance reports.
  • Develop, maintain, and utilize metrics and dashboards to communicate vulnerability status and trends over time.
  • Document asset inventories, systems, and rack elevations for NERC CIP-impacted sites.
  • Travel to substations and critical sites across the service territory for physical assessments and documentation.
  • Contribute to the continuous improvement of vulnerability management processes, procedures, and operational workflows.
  • Assist in site assessments, physical verification, and updating documentation related to vulnerability management.

Qualifications

  • Minimum of 2 years of experience in cybersecurity, IT operations, or vulnerability management.
  • Hands-on experience with vulnerability scanning tools such as Tenable, IP360, and Qualys.
  • Knowledge of patch management, risk-based remediation, and security best practices.
  • Familiarity with NERC CIP standards and evidence requirements is preferred.
  • Strong organizational and communication skills, capable of working independently and within teams.
  • Ability and willingness to travel to substations and critical infrastructure sites within San Diego County.
  • Proficiency in Excel, dashboard creation, and basic scripting is a plus.
  • Relevant certifications such as CompTIA Security+, GSEC, CISA, CISSP, or NERC CIP training are desirable.

Publishing Pay Range: $68.00 - $73.00

This position is based in office and requires employee to work on-site.

Apply