Security Engineer Jobs in Los Angeles, CA
Security Engineer jobs in Los Angeles are concentrated in entertainment technology, defense contracting, and financial services, with clusters in Culver City, El Segundo, and downtown Los Angeles drawing the heaviest demand. Employers hiring right now include Snap, CHAOS Industries, and Whatnot. Scan the live roles below and apply to whichever ones fit.
Find Security Engineer JobsOverview
Showing 5 of 41+ Security Engineer jobs
Location
San Francisco, CA; Los Angeles, CA; New York, NY; Seattle, WA
Employment Type
Full time
Location Type
Remote
Department
EngineeringCybersecurity
Compensation
- $210K – $290K • Offers Equity
The salary or hourly rate range may be inclusive of several levels that would be applicable to the position. Final salary or hourly rate will be based on a number of factors including, level, relevant prior experience, skills, and expertise. This range is only inclusive of base salary or hourly rate, not benefits or equity.
Join the Future of Commerce with Whatnot!
Whatnot is the largest live shopping platform in North America and Europe to buy, sell, and discover the things you love. Whether it's trading cards, fashion, electronics, or live plants, our sellers are building real businesses across hundreds of categories. We're building live commerce at a scale that's never been done in the West, and there's no playbook to copy. The people here are shaping how an entirely new industry develops.
As a remote co-located team, we're inspired by our values and anchored in hubs across the US, UK, Ireland, Poland, Germany, and Australia. We move fast, stay close to our users, and focus on the work that drives the most impact.
We're one of the fastest growing marketplaces and were recently named the #1 Best Startup Employer in America by Forbes. Check out the latest Whatnot updates on our news and engineering blogs and join us as we enable anyone to turn their passion into a business and bring people together through commerce.
Role
Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, identity systems, SaaS, and internal applications, under written rules of engagement.
Build and maintain AI-assisted testing harnesses: agent loops that run recon, attack-path discovery, fuzzing, and exploit validation with logging, scoping controls, and human approval gates.
Use LLMs and agentic tools to speed up vulnerability research, payload and test-case generation, code review, and report drafting, and measure where they help and where they mislead.
Red team our own AI systems: prompt injection, tool and connector abuse, data exfiltration, model and agent permission boundaries, and supply chain risk in AI dependencies.
Emulate realistic adversaries using MITRE ATT&CK and ATLAS, chaining findings into end-to-end attack paths rather than isolated bugs.
Run purple team exercises with detection engineering and incident response, and tune detections based on what your tests evade.
Write clear findings with reproduction steps, impact, and recommended fixes; track remediation to closure and retest.
Automate regression tests so fixed weaknesses stay fixed, and feed results into CI/CD pipelines.
Document and share techniques, tooling, and lessons learned with engineering teams.
Work collaboratively with Whatnot’s Blue Team on Purple Team engagements to help strengthen Whatnot’s overall security posture.
You
Curious about who thrives at Whatnot? We’ve found that low ego, a growth mindset, and leaning into action and high impact goes a long way here.
As our next Red Team Engineer you’ll find weaknesses in our infrastructure before real attackers do. You will use AI tools and agents to scale offensive testing, build the harnesses that run it, and turn findings into fixes across cloud, network, application, identity and CI/CD layers.
3+ years in offensive security, red teaming, or penetration testing, with real engagements against production-scale environments.
Strong programming skills in Python; you write your own tooling instead of only running others.
Hands-on experience building LLM-powered workflows or agents (tool use, orchestration, evaluation, guardrails), not just prompting a chat window.
Deep knowledge of at least two areas: cloud security and IAM abuse, Active Directory or identity attacks, Kubernetes and container escapes, web and API exploitation, CI/CD and supply chain attacks.
Working knowledge of AI-specific risks: prompt injection, insecure tool use, data leakage, excessive agent permissions, and model supply chain issues.
Sound judgment on scope, safety, and blast radius; you know how to test production-adjacent systems without causing outages.
Clear written communication: reports an engineer can act on and an executive can skim.
Benefits
Generous Holiday and Time off Policy
Health Insurance options including Medical, Dental, Vision
Work From Home Support
Home office setup allowance
Monthly allowance for cell phone and internet
Care benefits
Monthly allowance for wellness
Annual allowance towards Childcare
Lifetime benefit for family planning, such as adoption or fertility expenses
Retirement; 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
Monthly allowance to dogfood the app
All Whatnauts are expected to develop a deep understanding of our product. We're passionate about building the best user experience, and all employees are expected to use Whatnot as both a buyer and a seller as part of their job (our dogfooding budget makes this fun and easy!).
Parental Leave
16 weeks of paid parental leave + one month gradual return to work *company leave allowances run concurrently with country leave requirements which take precedence.
Please note: Whatnot will only contact you through official @whatnot.com email addresses. If you see an email impersonating a Whatnot recruiter, please disregard and report it as spam.
EOE
Whatnot is proud to be an Equal Opportunity Employer. We value diversity, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, parental status, disability status, or any other status protected by local law. We believe that our work is better and our company culture is improved when we encourage, support, and respect the different skills and experiences represented within our workforce.
Compensation Range: $210K - $290KLocation
San Francisco, CA; Los Angeles, CA; New York, NY; Seattle, WA
Employment Type
Full time
Location Type
Remote
Department
EngineeringCybersecurity
Compensation
- $210K – $290K • Offers Equity
The salary or hourly rate range may be inclusive of several levels that would be applicable to the position. Final salary or hourly rate will be based on a number of factors including, level, relevant prior experience, skills, and expertise. This range is only inclusive of base salary or hourly rate, not benefits or equity.
Join the Future of Commerce with Whatnot!
Whatnot is the largest live shopping platform in North America and Europe to buy, sell, and discover the things you love. Whether it's trading cards, fashion, electronics, or live plants, our sellers are building real businesses across hundreds of categories. We're building live commerce at a scale that's never been done in the West, and there's no playbook to copy. The people here are shaping how an entirely new industry develops.
As a remote co-located team, we're inspired by our values and anchored in hubs across the US, UK, Ireland, Poland, Germany, and Australia. We move fast, stay close to our users, and focus on the work that drives the most impact.
We're one of the fastest growing marketplaces and were recently named the #1 Best Startup Employer in America by Forbes. Check out the latest Whatnot updates on our news and engineering blogs and join us as we enable anyone to turn their passion into a business and bring people together through commerce.
Role
Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, identity systems, SaaS, and internal applications, under written rules of engagement.
Build and maintain AI-assisted testing harnesses: agent loops that run recon, attack-path discovery, fuzzing, and exploit validation with logging, scoping controls, and human approval gates.
Use LLMs and agentic tools to speed up vulnerability research, payload and test-case generation, code review, and report drafting, and measure where they help and where they mislead.
Red team our own AI systems: prompt injection, tool and connector abuse, data exfiltration, model and agent permission boundaries, and supply chain risk in AI dependencies.
Emulate realistic adversaries using MITRE ATT&CK and ATLAS, chaining findings into end-to-end attack paths rather than isolated bugs.
Run purple team exercises with detection engineering and incident response, and tune detections based on what your tests evade.
Write clear findings with reproduction steps, impact, and recommended fixes; track remediation to closure and retest.
Automate regression tests so fixed weaknesses stay fixed, and feed results into CI/CD pipelines.
Document and share techniques, tooling, and lessons learned with engineering teams.
Work collaboratively with Whatnot’s Blue Team on Purple Team engagements to help strengthen Whatnot’s overall security posture.
You
Curious about who thrives at Whatnot? We’ve found that low ego, a growth mindset, and leaning into action and high impact goes a long way here.
As our next Red Team Engineer you’ll find weaknesses in our infrastructure before real attackers do. You will use AI tools and agents to scale offensive testing, build the harnesses that run it, and turn findings into fixes across cloud, network, application, identity and CI/CD layers.
3+ years in offensive security, red teaming, or penetration testing, with real engagements against production-scale environments.
Strong programming skills in Python; you write your own tooling instead of only running others.
Hands-on experience building LLM-powered workflows or agents (tool use, orchestration, evaluation, guardrails), not just prompting a chat window.
Deep knowledge of at least two areas: cloud security and IAM abuse, Active Directory or identity attacks, Kubernetes and container escapes, web and API exploitation, CI/CD and supply chain attacks.
Working knowledge of AI-specific risks: prompt injection, insecure tool use, data leakage, excessive agent permissions, and model supply chain issues.
Sound judgment on scope, safety, and blast radius; you know how to test production-adjacent systems without causing outages.
Clear written communication: reports an engineer can act on and an executive can skim.
Benefits
Generous Holiday and Time off Policy
Health Insurance options including Medical, Dental, Vision
Work From Home Support
Home office setup allowance
Monthly allowance for cell phone and internet
Care benefits
Monthly allowance for wellness
Annual allowance towards Childcare
Lifetime benefit for family planning, such as adoption or fertility expenses
Retirement; 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
Monthly allowance to dogfood the app
All Whatnauts are expected to develop a deep understanding of our product. We're passionate about building the best user experience, and all employees are expected to use Whatnot as both a buyer and a seller as part of their job (our dogfooding budget makes this fun and easy!).
Parental Leave
16 weeks of paid parental leave + one month gradual return to work *company leave allowances run concurrently with country leave requirements which take precedence.
Please note: Whatnot will only contact you through official @whatnot.com email addresses. If you see an email impersonating a Whatnot recruiter, please disregard and report it as spam.
EOE
Whatnot is proud to be an Equal Opportunity Employer. We value diversity, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, parental status, disability status, or any other status protected by local law. We believe that our work is better and our company culture is improved when we encourage, support, and respect the different skills and experiences represented within our workforce.
Compensation Range: $210K - $290KSee All 41 Security Engineer Jobs in Los Angeles
Find roles in Los Angeles that match your experience and apply in just a few clicks.
Find Security Engineer JobsSecurity Engineer Job Market in Los Angeles
Who's Hiring
Top Industries Hiring
- Technology & Software
- Manufacturing
- Consulting & Professional Services
Security Engineer Jobs in Los Angeles: Frequently Asked Questions
How do I get a security engineer job in Los Angeles?
Focus your search on the sectors that hire most heavily in Los Angeles: entertainment and media technology companies in Culver City and Hollywood, aerospace and defense contractors in El Segundo and the South Bay, and financial services firms downtown. Candidates who hold certifications like CISSP, CISM, or CompTIA Security+ and can demonstrate hands-on experience with cloud security or zero-trust architecture stand out in this market.
Which companies hire security engineers in Los Angeles?
Employers hiring security engineers in Los Angeles right now include Snap, CHAOS Industries, and Whatnot, based on current listings on Migrate Mate as of November 2026. The Los Angeles market is particularly strong with defense primes, entertainment studios with large digital infrastructure, and venture-backed tech firms headquartered on the Westside.
Are there remote security engineer jobs in Los Angeles?
Yes, though it varies by function. Roles centered on cloud security, threat intelligence, and security operations center analysis tend to be more remote-friendly, while positions requiring physical access to on-site hardware or government-cleared facilities are almost always on-site. About 73% of security engineer openings tied to Los Angeles are remote or hybrid as of November 2026, with hybrid arrangements most common among Westside tech employers.
How can I get a security engineer job in Los Angeles with little or no experience?
The most realistic entry path in Los Angeles is moving into a junior security analyst or IT support role at one of the city's many mid-size tech companies or managed security service providers, then building toward a security engineer title. Defense contractors in El Segundo and the South Bay also hire entry-level candidates who hold a clearance or are clearance-eligible. Completing a recognized certification such as CompTIA Security+ before applying gives you a measurable edge locally.
Which industries hire the most security engineers in Los Angeles?
Los Angeles security engineer roles concentrate in Technology & Software, Manufacturing, and Consulting & Professional Services, based on current listings on Migrate Mate as of November 2026. The combination of a large defense and aerospace corridor in the South Bay, major entertainment and streaming companies on the Westside, and a growing fintech and healthtech startup scene downtown makes Los Angeles one of the more diverse security engineering markets in the country.
Related Jobs in California
See All 41 Security Engineer Jobs in Los Angeles
Find roles in Los Angeles that match your experience and apply in just a few clicks.
Find Security Engineer Jobs