ZipRecruiter

Log In

1

Web Penetration Testing Jobs in California (NOW HIRING)

Tekskills

Security Tester

Sunnyvale, CA · On-site

Good knowledge of Secure code Analysis and Web penetration testing. Good experience in HP Fortify and WebInspect tool. Top 3 responsibilities you would expect the Subcon to shoulder and execute:

LPL Financial

AVP, Penetration Tester

San Diego, CA · On-site

Conduct tactical penetration testing assessments of web, mobile, and API applications against OWASP Top 10 threats and emerging risks, and collaborate with Application Security teams to provide ...

MM International

Penetration Tester

San Francisco, CA · On-site

Penetration Tester / Security Analyst Location: San Francisco, CA, Onsite- Relocation works ... VAPT , Web/API/Thick Client Security Testing * Tools: Burp Suite, Metasploit, Nessus, Core Impact ...

SHEIN

Senior Security Engineer

Los Angeles, CA

$123K - $169K/yr

Hands-on experience with web application vulnerability assessments and penetration testing. * Familiarity with bug bounty platforms (e.g., HackerOne, Bugcrowd) and triage workflows. * Strong ...

SHEIN

Senior Security Engineer

Los Angeles, CA · On-site

$91K - $149K/yr

Hands-on experience with web application vulnerability assessments and penetration testing. * Familiarity with bug bounty platforms (e.g., HackerOne, Bugcrowd) and triage workflows. * Strong ...

next page

Showing results 1-20

All JobsWeb Penetration Testing JobsWeb Penetration Testing Jobs in California

Web Penetration Testing information

See California salary details

$11

$58

$85

How much do web penetration testing jobs pay per hour?

As of Aug 26, 2026, the average hourly pay for web penetration testing in California is $58.23, according to ZipRecruiter salary data. Most workers in this role earn between $50.53 and $65.96 per hour, depending on experience, location, and employer.

What is web penetration testing?

Web penetration testing is a security assessment process where ethical hackers simulate cyberattacks on a website or web application to identify vulnerabilities and weaknesses. The goal is to find and fix security flaws before malicious hackers can exploit them. This process involves testing for issues such as SQL injection, cross-site scripting (XSS), authentication problems, and insecure configurations. The results help organizations strengthen their web security and protect sensitive data from breaches.

What are the key skills and qualifications needed to thrive as a web penetration tester?

To excel as a Web Penetration Tester, you need a solid understanding of web application security, networking protocols, and common vulnerabilities, often supported by a degree in computer science or a related field. Familiarity with tools like Burp Suite, OWASP ZAP, Metasploit, and relevant certifications such as OSCP or CEH is typically required. Strong analytical thinking, attention to detail, and effective communication skills help testers identify risks and clearly report findings to technical and non-technical stakeholders. These competencies are crucial for uncovering security flaws, ensuring robust defenses, and helping organizations mitigate potential cyber threats.

What are some common challenges faced by web penetration testers during assessments, and how can they be addressed?

Web penetration testers often encounter challenges such as limited access to required testing environments, incomplete or outdated documentation, and rapidly evolving web technologies that demand continuous learning. Additionally, testers must balance thoroughness with time constraints and ensure clear communication with development and security teams. Addressing these challenges involves proactive coordination with stakeholders, staying updated with industry tools and vulnerabilities, and maintaining detailed, well-structured reporting to facilitate remediation and collaboration.

What is the difference between Web Penetration Testing vs Web Security Analyst?

AspectWeb Penetration TestingWeb Security Analyst
CertificationsOSCP, CEH, GPENCISSP, CISA, GIAC
Work EnvironmentHands-on testing, simulated attacksMonitoring, policy development, incident response
Employer & Industry UsageCybersecurity firms, tech companies, consultingCorporate IT, financial institutions, government agencies

Web Penetration Testing focuses on actively identifying vulnerabilities through simulated attacks, while Web Security Analysts monitor and improve security measures, analyze threats, and respond to incidents. Both roles require cybersecurity certifications but differ in their approach and daily tasks.

What are popular job titles related to Web Penetration Testing jobs in California?

For Web Penetration Testing jobs in California, the most frequently searched job titles are:

What job categories do people searching Web Penetration Testing jobs in California look for?

The top searched job categories for Web Penetration Testing jobs in California are:

What cities in California are hiring for Web Penetration Testing jobs?

Cities in California with the most Web Penetration Testing job openings:

Web Penetration Testing jobs near you
Infographic showing various Web Penetration Testing job openings in California as of August 2026, with employment types broken down into 1% As Needed, 88% Full Time, 8% Part Time, 2% Contract, and 1% Nights. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $121,128 per year, or $58.2 per hour.

Security Tester

Tekskills

Sunnyvale, CA • On-site

Contractor

Re-posted 12 days ago

Job description

Job Description

Security Tester

Location: Sunnyvale CA 94085

Contract duration : 6 Months

Implementation Partner: Infosys


Must Have Skills

Application Security testing

Secure code analysis

Network Vulnerability Assessment

Nice to have skills

Apple working experience

HP fortify and HP Webinspect tool

Detailed Job Description: Web application security testing. Good knowledge of Secure code Analysis and Web penetration testing. Good experience in HP Fortify and WebInspect tool.

Top 3 responsibilities you would expect the Subcon to shoulder and execute: Client facing Onsite coordinator Security test Analysis


Nagarjuna. G

Sr.Technical Recruiter

Phone: 732-795-1267

Additional Information

All your information will be kept confidential according to EEO guidelines.

Apply