Bug Bounty Hunter

This is a fully remote position, open to applicants in France.

📋 Description

• Create, enhance, and refine offensive security tools and workflows, involving architecture, scope, guardrails, and termination conditions.

• Implement, stabilize, and maintain tools with a Dev/DevOps approach.

• Develop and oversee pipelines, CI/CD, monitoring, and ongoing reliability enhancements.

• Plan, initiate, and oversee workflows on a daily basis.

• Identify agent drift, manage false positives, and restore systems post-incident.

• Rapidly prototype, evaluate tangible benefits, and determine what to scale or discontinue.

• Collaborate with Product Owners, DTOs, developers, and CISOs to assess vulnerabilities, assist in remediation efforts, and enhance security practices.

• Record design decisions, including guardrails considered and rejected along with the rationale.

• Suggest and design new functionalities to bolster the Group’s security posture.

• Operate and enhance the AI-driven internal EASM platform, agentic SAST, and vulnerability lifecycle management platform.

⛳️ Requirements

• Background as a Hunter, Bug Bounty Hunter, or security researcher.

• Experience in probing attack surfaces, recognizing non-obvious exploitation paths, and differentiating exploitable vulnerabilities from scanner noise.

• Strong bug bounty achievements or freelance security experience is highly regarded.

• Practical experience utilizing AI in security, including agents, automation, tool development, and advanced AI model applications.

• Capability to define necessary developments, guide coding agents, review their outputs, and evaluate robustness.

• Experience in orchestrating agentic workflows, including chaining and monitoring agents, diagnosing workflow drift, and implementing corrections.

• Experience with production deployment and product stabilization, encompassing pipelines, CI/CD, monitoring, and continuous improvement.

• High level of autonomy and the ability to translate loosely defined objectives into actionable solutions.

• Proficient communication skills with Product Owners, DTOs, developers, and CISOs.

• Technical curiosity, innovative problem-solving, and persistence reflective of a Red Team mindset.

🏝️ Benefits

• AI-First journey and innovative working methods through artificial intelligence.

• Customized learning pathways.

• Opportunities for internal mobility.

• Themed events such as afterworks, sports activities, CSR initiatives, and seminars.

• Commitment to equal opportunities, diversity, and inclusion.