Bug Bounty Hunter

This is a fully remote position, open to applicants in France.

📋 Description

• Develop, stabilize, and manage tools and processes for vulnerability detection.

• Collaborate with Product Owners, DTOs, developers, and CISOs to share insights, assist in remediation, and enhance security practices.

• Operate, enhance the reliability of, and evolve the AI-driven internal EASM platform.

• Operate, enhance the reliability of, and evolve the agentic SAST solution.

• Operate, enhance the reliability of, and evolve the vulnerability lifecycle management platform.

• Design, develop, and improve offensive security tools and workflows.

• Deploy, stabilize, and maintain solutions within a Dev/DevOps framework.

• Manage workflows daily: scheduling, launching, monitoring, diagnosing agent drift, triaging false positives, and restoring operations post-incident.

• Rapidly prototype, assess actual impact, and determine what should be industrialized or discontinued.

• Triage vulnerabilities, make findings actionable, and track remediation efforts.

• Document design decisions and suggest future opportunities for enhancing security.

⛳️ Requirements

• Experience as a security hunter, bug bounty hunter, or security researcher.

• Capability to explore an attack surface and identify non-obvious exploitation paths.

• Proficiency in differentiating genuinely exploitable vulnerabilities from scanner-generated noise.

• Bug bounty experience or freelance security experience is highly preferred.

• Practical experience in applying AI to security, including agents, automation, tool development, and advanced AI model usage.

• Ability to articulate what needs to be developed, guide a coding agent, review its output, and evaluate its quality.

• Expertise in orchestrating agentic workflows.

• Comfortable with pipelines, CI/CD, monitoring, and continuous improvement processes.

• Concrete achievements valued over a mere list of tools.

• Highly autonomous, capable of transforming an idea into a functional solution.

• Effective communication skills with Product Owners, DTOs, developers, and CISOs.

🏝️ Benefits

• Become part of Septeo’s AI-First journey and explore innovative working methods through artificial intelligence.

• Customized training and development programs.

• Opportunities for internal mobility.

• Themed events (after-work gatherings, sports, CSR activities, seminars, etc.).

• Commitment to equal opportunity, diversity, and inclusion.