ZipRecruiter

Log In

1

Vulnerability Scanner Jobs in California (NOW HIRING)

GDH

Vulnerability Management Analyst

San Jose, CA · On-site

$68 - $73/hr

This role involves managing vulnerability scans, ensuring compliance with regulatory standards, and collaborating with cross-functional teams to maintain the security posture of operational assets.

CSV-Taurean

Cybersecurity Team Lead (ISSM)

Monterey, CA · On-site

$145K - $165K/yr

Oversee vulnerability scanning and remediation. * Manage incident detection and response. * Maintain ATO status and compliance reporting. * Supervise cybersecurity staff and assign tasks. Core ...

CSV-TAUREAN

$145K - $165K/yr

Oversee vulnerability scanning and remediation. * Manage incident detection and response. * Maintain ATO status and compliance reporting. * Supervise cybersecurity staff and assign tasks. Core ...

Neumo Holdings LLC

Security Analyst (On-Site)

Fairfield, CA · On-site

$90K - $110K/yr

Analyze vulnerability scan results, prioritize risks based on severity and business impact, and track remediation efforts * Partner with system owners and engineering teams to ensure timely patching ...

Cooley

Senior Cyber Security Engineer

San Diego, CA

Vulnerability scanners * Data loss prevention * Email gateways and anti-spam services * Privileged account management systems * Security information and event management systems * AWS and Azure Cloud ...

next page

Showing results 1-20

All JobsVulnerability Scanner JobsVulnerability Scanner Jobs in California

Vulnerability Scanner information

See California salary details

$9

$15

$22

How much do vulnerability scanner jobs pay per hour?

As of Jul 26, 2026, the average hourly pay for vulnerability scanner in California is $15.95, according to ZipRecruiter salary data. Most workers in this role earn between $13.99 and $17.07 per hour, depending on experience, location, and employer.

How does a Vulnerability Scanner typically collaborate with IT and security teams during a vulnerability assessment?

Vulnerability Scanners work closely with both IT and security teams to ensure comprehensive assessments of network and application vulnerabilities. They often coordinate with system administrators to schedule scans, minimize disruptions, and gain necessary access. After identifying vulnerabilities, they discuss findings with security analysts to prioritize remediation efforts and provide actionable recommendations. Effective communication and teamwork are essential, as scanners must translate technical results into understandable risks for various stakeholders.

What are the key skills and qualifications needed to thrive as a Vulnerability Scanner, and why are they important?

To thrive as a Vulnerability Scanner, you need a solid understanding of cybersecurity principles, network protocols, and operating systems, often supported by relevant certifications like CompTIA Security+ or CEH. Familiarity with vulnerability scanning tools such as Nessus, OpenVAS, and Qualys, as well as knowledge of ticketing systems and reporting platforms, is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills for identifying risks and sharing findings with technical and non-technical stakeholders. These skills are crucial to accurately detect vulnerabilities, prioritize threats, and help organizations strengthen their security posture.

What is the difference between Vulnerability Scanner vs Penetration Tester?

AspectVulnerability ScannerPenetration Tester
CredentialsCertifications like CompTIA Security+, CEH, CISSP often preferredCertifications like OSCP, CEH, GPEN often required
Work EnvironmentPrimarily software-based, automated scanning toolsHands-on testing, manual exploitation, on-site or remote
Industry UsageUsed by security teams for vulnerability assessmentEngaged for in-depth security testing and exploitation

While vulnerability scanners automatically identify security weaknesses, penetration testers perform manual testing to exploit vulnerabilities. Both roles are essential for comprehensive security, but they differ in approach and depth of testing.

What are vulnerability scanners?

Vulnerability scanners are specialized software tools designed to automatically identify security weaknesses in computer systems, networks, and applications. They work by scanning for known vulnerabilities, misconfigurations, and outdated software that could be exploited by cyber attackers. These tools help organizations proactively find and fix security issues before they can be compromised. Regular use of vulnerability scanners is a key part of maintaining strong cybersecurity defenses.
Vulnerability Scanner jobs near you
Infographic showing various Vulnerability Scanner job openings in California as of July 2026, with employment types broken down into 66% Full Time, 30% Part Time, 3% Contract, and 1% Nights. Highlights an 99% Physical, and 1% Remote job distribution, with an average salary of $33,168 per year, or $15.9 per hour.
Vulnerability Management Analyst

Vulnerability Management Analyst

GDH

San Jose, CA • On-site

$68 - $73/hr

Other

Posted 5 days ago

Job description

Role Summary
A Vulnerability Management Analyst is responsible for supporting cybersecurity initiatives within critical infrastructure environments, specifically focusing on vulnerability identification, analysis, and remediation. This role involves managing vulnerability scans, ensuring compliance with regulatory standards, and collaborating with cross-functional teams to maintain the security posture of operational assets. The position requires a proactive approach to safeguarding infrastructure and maintaining documentation for audit purposes.

Responsibilities

  • Conduct routine vulnerability scans using industry-standard tools such as Tenable, Tripwire IP360, and Qualys.
  • Analyze and validate scan results to identify critical vulnerabilities, collaborating with system and application owners to prioritize remediation efforts.
  • Track remediation activities, verify vulnerability closures through re-scanning, and document remediation progress.
  • Partner with infrastructure and application teams to ensure timely patching, configuration compliance, and security baseline adherence.
  • Support NERC CIP compliance efforts by maintaining accurate documentation, providing evidence, and generating compliance reports.
  • Develop, maintain, and utilize metrics and dashboards to communicate vulnerability status and trends over time.
  • Document asset inventories, systems, and rack elevations for NERC CIP-impacted sites.
  • Travel to substations and critical sites across the service territory for physical assessments and documentation.
  • Contribute to the continuous improvement of vulnerability management processes, procedures, and operational workflows.
  • Assist in site assessments, physical verification, and updating documentation related to vulnerability management.

Qualifications

  • Minimum of 2 years of experience in cybersecurity, IT operations, or vulnerability management.
  • Hands-on experience with vulnerability scanning tools such as Tenable, IP360, and Qualys.
  • Knowledge of patch management, risk-based remediation, and security best practices.
  • Familiarity with NERC CIP standards and evidence requirements is preferred.
  • Strong organizational and communication skills, capable of working independently and within teams.
  • Ability and willingness to travel to substations and critical infrastructure sites within San Diego County.
  • Proficiency in Excel, dashboard creation, and basic scripting is a plus.
  • Relevant certifications such as CompTIA Security+, GSEC, CISA, CISSP, or NERC CIP training are desirable.

Publishing Pay Range: $68.00 - $73.00

This position is based in office and requires employee to work on-site.

Apply