Perform security code reviews and penetration testing on our web applications and services. * Contribute to security initiatives and serve as a security champion within software development teams.
Perform security code reviews and penetration testing on our web applications and services. * Contribute to security initiatives and serve as a security champion within software development teams.
GIAC Web Applications Penetration Tester (GWAPT) * GIAC Penetration Tester (GPEN) * Certified Ethical Hacker (CEH) * Certified Information Security Manager (CISM) * Certified Web Application Defender ...
GIAC Web Applications Penetration Tester (GWAPT) * GIAC Penetration Tester (GPEN) * Certified Ethical Hacker (CEH) * Certified Information Security Manager (CISM) * Certified Web Application Defender ...
GIAC Web Applications Penetration Tester (GWAPT) * GIAC Penetration Tester (GPEN) * Certified Ethical Hacker (CEH) * Certified Information Security Manager (CISM) * Certified Web Application Defender ...
GIAC Web Applications Penetration Tester (GWAPT) * GIAC Penetration Tester (GPEN) * Certified Ethical Hacker (CEH) * Certified Information Security Manager (CISM) * Certified Web Application Defender ...
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Sr Software Engineer in Test
Los Angeles, CA · On-site
$120 - $170/hr
Utilized integration tools, network vulnerabilities and penetration testing tools * Ensure that the ... Selenium Webdriver, Web Services: REST, SOAP) * Liaise with network administrators, systems ...
Sr Software Engineer in Test
Los Angeles, CA · On-site
$120 - $170/hr
Utilized integration tools, network vulnerabilities and penetration testing tools * Ensure that the ... Selenium Webdriver, Web Services: REST, SOAP) * Liaise with network administrators, systems ...
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$119K - $161K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$119K - $161K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$118K - $159K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$118K - $159K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$130K - $176K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$130K - $176K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$130K - $175K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
$130K - $175K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
... penetration testing, web crawling tools is a plus, like ModSecurity, Snort, Burp Suite, OWASP ZAP, Metasploit, Sqlmap, Selenium, Puppeteer, etc. Company : Fortinet is a provider of network security ...
... penetration testing, web crawling tools is a plus, like ModSecurity, Snort, Burp Suite, OWASP ZAP, Metasploit, Sqlmap, Selenium, Puppeteer, etc. Company : Fortinet is a provider of network security ...
... e.g., penetration testing, red teaming, vulnerability assessment). * Broad experience assessing the security posture of everything from web applications to hardware and embedded systems.
... e.g., penetration testing, red teaming, vulnerability assessment). * Broad experience assessing the security posture of everything from web applications to hardware and embedded systems.
... performing penetration testing, password protection testing and application security testing ... Web Access (PVWA) Experience with CyberArk Privileged Access Management routine tasks- Access ...
... performing penetration testing, password protection testing and application security testing ... Web Access (PVWA) Experience with CyberArk Privileged Access Management routine tasks- Access ...
... Penetration testing. Knowledge of Traffic intercepting tools like BurpSuite, Paros, TemperIE. At least 3 years of experience in Development/ Configuration/solutions evaluation/ Validation and ...
... Penetration testing. Knowledge of Traffic intercepting tools like BurpSuite, Paros, TemperIE. At least 3 years of experience in Development/ Configuration/solutions evaluation/ Validation and ...
CyberArk Consultant
Downey, CA · On-site
... penetration testing, password protection testing and application security testing. Requires the ... Web Access (PVWA) Experience with CyberArk Privileged Access Management routine tasks- Access ...
CyberArk Consultant
Downey, CA · On-site
... penetration testing, password protection testing and application security testing. Requires the ... Web Access (PVWA) Experience with CyberArk Privileged Access Management routine tasks- Access ...
AI Software Engineer
San Francisco, CA · On-site
$130 - $170/hr
... web applications Experiment & Innovate Rapidly * Prototype breakthrough approaches to AI-driven ... Work directly with world‑class penetration testers and security researchers * Partner with data ...
AI Software Engineer
San Francisco, CA · On-site
$130 - $170/hr
... web applications Experiment & Innovate Rapidly * Prototype breakthrough approaches to AI-driven ... Work directly with world‑class penetration testers and security researchers * Partner with data ...
Design, develop, and maintain robust and scalable web applications using Python with serverless ... Experience with security testing tools and techniques (e.g., penetration testing, static code ...
Quick apply
Design, develop, and maintain robust and scalable web applications using Python with serverless ... Experience with security testing tools and techniques (e.g., penetration testing, static code ...
... web, mobile, API, cloud, and AI-enabled applications - including architecture and design reviews, threat modeling, secure code reviews, and penetration testing. * Conduct threat modeling exercises to ...
... web, mobile, API, cloud, and AI-enabled applications - including architecture and design reviews, threat modeling, secure code reviews, and penetration testing. * Conduct threat modeling exercises to ...
Lead Security Consultant - Professional Services Security Assurance (PSSA)
San Francisco, CA · On-site
... web, mobile, API, cloud, and AI-enabled applications - including architecture and design reviews, threat modeling, secure code reviews, and penetration testing. * Conduct threat modeling exercises to ...
Lead Security Consultant - Professional Services Security Assurance (PSSA)
San Francisco, CA · On-site
... web, mobile, API, cloud, and AI-enabled applications - including architecture and design reviews, threat modeling, secure code reviews, and penetration testing. * Conduct threat modeling exercises to ...
Web Penetration Testing information
See California salary details
$11.39 - $18.12
4% of jobs
$18.12 - $24.85
0% of jobs
$24.85 - $31.57
0% of jobs
$31.57 - $38.30
6% of jobs
$38.30 - $45.03
5% of jobs
$50.22 is the 25th percentile. Wages below this are outliers.
$45.03 - $51.76
12% of jobs
The median wage is $58.34 / hr.
$51.76 - $58.49
23% of jobs
$64.88 is the 75th percentile. Wages above this are outliers.
$58.49 - $65.22
26% of jobs
$65.22 - $71.95
13% of jobs
$71.95 - $78.68
3% of jobs
$78.68 - $85.41
7% of jobs
$11
$58
$85
How much do web penetration testing jobs pay per hour?
As of Aug 22, 2026, the average hourly pay for web penetration testing in California is $58.23, according to ZipRecruiter salary data. Most workers in this role earn between $50.53 and $65.96 per hour, depending on experience, location, and employer.
What is web penetration testing?
Web penetration testing is a security assessment process where ethical hackers simulate cyberattacks on a website or web application to identify vulnerabilities and weaknesses. The goal is to find and fix security flaws before malicious hackers can exploit them. This process involves testing for issues such as SQL injection, cross-site scripting (XSS), authentication problems, and insecure configurations. The results help organizations strengthen their web security and protect sensitive data from breaches.
What are the key skills and qualifications needed to thrive as a web penetration tester?
To excel as a Web Penetration Tester, you need a solid understanding of web application security, networking protocols, and common vulnerabilities, often supported by a degree in computer science or a related field. Familiarity with tools like Burp Suite, OWASP ZAP, Metasploit, and relevant certifications such as OSCP or CEH is typically required. Strong analytical thinking, attention to detail, and effective communication skills help testers identify risks and clearly report findings to technical and non-technical stakeholders. These competencies are crucial for uncovering security flaws, ensuring robust defenses, and helping organizations mitigate potential cyber threats.
What are some common challenges faced by web penetration testers during assessments, and how can they be addressed?
Web penetration testers often encounter challenges such as limited access to required testing environments, incomplete or outdated documentation, and rapidly evolving web technologies that demand continuous learning. Additionally, testers must balance thoroughness with time constraints and ensure clear communication with development and security teams. Addressing these challenges involves proactive coordination with stakeholders, staying updated with industry tools and vulnerabilities, and maintaining detailed, well-structured reporting to facilitate remediation and collaboration.
What is the difference between Web Penetration Testing vs Web Security Analyst?
| Aspect | Web Penetration Testing | Web Security Analyst |
|---|---|---|
| Certifications | OSCP, CEH, GPEN | CISSP, CISA, GIAC |
| Work Environment | Hands-on testing, simulated attacks | Monitoring, policy development, incident response |
| Employer & Industry Usage | Cybersecurity firms, tech companies, consulting | Corporate IT, financial institutions, government agencies |
Web Penetration Testing focuses on actively identifying vulnerabilities through simulated attacks, while Web Security Analysts monitor and improve security measures, analyze threats, and respond to incidents. Both roles require cybersecurity certifications but differ in their approach and daily tasks.
What are popular job titles related to Web Penetration Testing jobs in California?
For Web Penetration Testing jobs in California, the most frequently searched job titles are:
What job categories do people searching Web Penetration Testing jobs in California look for?
The top searched job categories for Web Penetration Testing jobs in California are:
What cities in California are hiring for Web Penetration Testing jobs?
Cities in California with the most Web Penetration Testing job openings:
Job description
Product Security Engineer
As a Product Security Engineer at Astranis, you are a software engineer with a passion for security, responsible for building and securing our web applications and services. Your role will involve embedding security into the software development lifecycle, from design to deployment. While your primary role is to build secure software in Python and modern web stacks, your expertise will be used to identify vulnerabilities, conduct security reviews, and help engineering teams raise the bar for security across the board.
Role
- Perform security code reviews and penetration testing on our web applications and services.
- Contribute to security initiatives and serve as a security champion within software development teams.
- Provide guidance and support to developers on implementing security measures and secure coding best practices.
- Collaborate with vendors, partners, and other Astranis software engineers to implement effective remediation strategies.
- Perform risk assessments to identify and prioritize threats in our applications and infrastructure.
- Work with development teams during the design phase to build secure systems and ensure our products are implemented to a high security standard.
- Collaborate with software development teams to design and implement technical solutions that address identified risks.
Requirements
- 2+ years of experience in software engineering with a focus on security.
- Strong investigative, analytical problem-solving skills and attention to detail.
- Experience with secure coding practices for web applications.
- Software development experience and security expertise in Python and modern web frameworks (e.g., Django, Flask, React).
- Proven experience in threat modeling and security assessments for web applications.
- Proficiency in software development, including auditing and writing secure code.
- Strong knowledge of security best practices, common vulnerabilities, and frameworks.
- Strong communication skills, both written and spoken.
- Ability to work collaboratively within a team environment.
About Astranis
Sourced by ZipRecruiter
Company size
201 - 500 Employees
Headquarters location
San Francisco, CA, US
Year founded
2015