ZipRecruiter

Log In

1

Web Penetration Testing Jobs in California (NOW HIRING)

Bridge Tech

Pen Tester

San Francisco, CA

- Conduct black box, white box vulnerability and penetration testing - Setup threat modesla and ... the SDLC of web applications - Develop Application Security practice - Experience in Ethical ...

Bridge Tech

Pen Tester

San Francisco, CA · On-site

Company Description - Conduct black box, white box vulnerability and penetration testing - Setup ... the SDLC of web applications - Develop Application Security practice - Experience in Ethical ...

CNM LLP

Senior Associate - Cyber Security

Los Angeles, CA · On-site

$107K - $139K/yr

Performing wireless, internal and external network, and web application vulnerability and penetration testing and the ability to document technical observations and recommendations * Vulnerability ...

CNM LLP

Senior Associate - Cyber Security

Los Angeles, CA · On-site

$107K - $139K/yr

Performing wireless, internal and external network, and web application vulnerability and penetration testing and the ability to document technical observations and recommendations * Vulnerability ...

Jobsbridge

DevOps Developer

Redwood City, CA

Puppet) Linux skills web services architectures and delivering APIs as a service AWS or equivalent ... systems from attack penetration testing Qualifications API as a service, Linux Additional ...

Intel

Information Security Engineer

Folsom, CA

Experience in adversary emulation, network penetration testing, web application penetration testing, and cloud penetration testing (e.g. Azure, GCP, AWS). * Practical experience with Windows ...

Brave

Sr. Security Engineer

San Francisco, CA · On-site

$180 - $240/hr

Experience in penetration testing and/or security auditing * Proficiency in C++, both implementing and reviewing * Strong familiarity with the Web security model * Experience securing AWS ...

Aptus Solutions Inc.

PEN TESTER

San Jose, CA

Responsibilities Conduct black box ,white box security and penetration testing to assess and ... web or mobile application security 5+ years of application development Passion for security, and a ...

Jobsbridge

Application Security Engineer

Torrance, CA · On-site

$61.25 - $82/hr

... penetration testing o Security code review o Static Analysis Security Testing (SAST) o Dynamic ... Strong knowledge of secure development practices Deep knowledge of common web application ...

Esri

Sr. Application Security Engineer

Redlands, CA · On-site

$59 - $79/hr

... penetration testing to identify potential issues * Provide application security guidance and ... Solid understanding of common web application security standards (HTTP, OAuth, OIDC, REST, and more)

Esri

Sr. Application Security Engineer

Redlands, CA · On-site

$59 - $79/hr

... penetration testing to identify potential issues • Provide application security guidance and ... common web application security standards (HTTP, OAuth, OIDC, REST, and more) • Experience ...

previous pagenext page

Showing results 21-40

All JobsWeb Penetration Testing JobsWeb Penetration Testing Jobs in California

Web Penetration Testing information

See California salary details

$11

$58

$85

How much do web penetration testing jobs pay per hour?

As of Aug 22, 2026, the average hourly pay for web penetration testing in California is $58.23, according to ZipRecruiter salary data. Most workers in this role earn between $50.53 and $65.96 per hour, depending on experience, location, and employer.

What is web penetration testing?

Web penetration testing is a security assessment process where ethical hackers simulate cyberattacks on a website or web application to identify vulnerabilities and weaknesses. The goal is to find and fix security flaws before malicious hackers can exploit them. This process involves testing for issues such as SQL injection, cross-site scripting (XSS), authentication problems, and insecure configurations. The results help organizations strengthen their web security and protect sensitive data from breaches.

What are the key skills and qualifications needed to thrive as a web penetration tester?

To excel as a Web Penetration Tester, you need a solid understanding of web application security, networking protocols, and common vulnerabilities, often supported by a degree in computer science or a related field. Familiarity with tools like Burp Suite, OWASP ZAP, Metasploit, and relevant certifications such as OSCP or CEH is typically required. Strong analytical thinking, attention to detail, and effective communication skills help testers identify risks and clearly report findings to technical and non-technical stakeholders. These competencies are crucial for uncovering security flaws, ensuring robust defenses, and helping organizations mitigate potential cyber threats.

What are some common challenges faced by web penetration testers during assessments, and how can they be addressed?

Web penetration testers often encounter challenges such as limited access to required testing environments, incomplete or outdated documentation, and rapidly evolving web technologies that demand continuous learning. Additionally, testers must balance thoroughness with time constraints and ensure clear communication with development and security teams. Addressing these challenges involves proactive coordination with stakeholders, staying updated with industry tools and vulnerabilities, and maintaining detailed, well-structured reporting to facilitate remediation and collaboration.

What is the difference between Web Penetration Testing vs Web Security Analyst?

AspectWeb Penetration TestingWeb Security Analyst
CertificationsOSCP, CEH, GPENCISSP, CISA, GIAC
Work EnvironmentHands-on testing, simulated attacksMonitoring, policy development, incident response
Employer & Industry UsageCybersecurity firms, tech companies, consultingCorporate IT, financial institutions, government agencies

Web Penetration Testing focuses on actively identifying vulnerabilities through simulated attacks, while Web Security Analysts monitor and improve security measures, analyze threats, and respond to incidents. Both roles require cybersecurity certifications but differ in their approach and daily tasks.

What are popular job titles related to Web Penetration Testing jobs in California?

For Web Penetration Testing jobs in California, the most frequently searched job titles are:

What job categories do people searching Web Penetration Testing jobs in California look for?

The top searched job categories for Web Penetration Testing jobs in California are:

What cities in California are hiring for Web Penetration Testing jobs?

Cities in California with the most Web Penetration Testing job openings:

Web Penetration Testing jobs near you
Infographic showing various Web Penetration Testing job openings in California as of August 2026, with employment types broken down into 1% As Needed, 88% Full Time, 8% Part Time, 2% Contract, and 1% Nights. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $121,128 per year, or $58.2 per hour.

Member of Technical Staff (Offensive Security Engineer)

Perplexity

San Francisco, CA • On-site

Full-time

Re-posted 10 days ago

Job description

Job Summary:
Perplexity is seeking a highly skilled, experienced and hands-on Offensive Security Engineer to join our dynamic security team. The role involves planning and executing red team operations, penetration tests, and attack simulations to identify vulnerabilities in Perplexity's infrastructure, applications, and AI systems.
Responsibilities:
• Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure (AWS, Kubernetes), endpoints, and application surfaces
• Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services
• Assess AI/ML-specific attack surfaces including prompt injection, model exfiltration, agent abuse, tool-use exploitation, and MCP security boundaries
• Develop and maintain custom offensive tooling, exploits, and automation to improve the efficiency and coverage of security testing
• Perform open-scope adversary simulations that test detection and response capabilities end to end, collaborating closely with the defensive security team
• Drive threat modeling sessions with engineering teams to identify and prioritize attack vectors in new features and architectures
• Deliver clear, actionable findings to both technical and executive audiences; partner with engineering to validate remediations
• Contribute to the security of CI/CD pipelines, supply chain integrity, and secrets management through offensive assessment
• Stay current on emerging attack techniques, vulnerability research, and adversary tradecraft; bring external perspective into Perplexity's security strategy
Qualifications:
Required:
• 5+ years of hands-on experience in offensive security, red teaming, or penetration testing
• Deep technical expertise in at least two of: cloud security (AWS/GCP/Azure), web/API application security, Kubernetes and container security, macOS/Linux endpoint security, network penetration testing, or CI/CD pipeline security
• Track record of discovering impactful vulnerabilities or developing novel attack techniques in production environments
• Strong programming and scripting skills in Python, Go, or similar languages; comfortable writing custom tooling and exploits
• Experience with industry-standard offensive tools (Burp Suite, Cobalt Strike / Sliver / Mythic, Metasploit, BloodHound, nuclei, etc.) and ability to operate beyond them
• Excellent written and verbal communication; able to translate complex technical findings into clear risk narratives
• Experience assessing AI/ML systems, LLM applications, or agentic workflows for security vulnerabilities
Preferred:
• Published security research
• Conference talks (DEF CON, Black Hat, BSides)
• CVE credits
• Meaningful bug bounty contributions
Company:
Perplexity is an AI-powered platform that retrieves, analyzes information from the web to deliver structured answers with cited sources. Founded in 2022, the company is headquartered in San Francisco, USA, with a team of 201-500 employees. The company is currently Growth Stage.

Apply