Security Analyst, Bug Bounty

This is a fully remote position, open to applicants in United States.

📋 Description

• Analyze, evaluate, reproduce, and prioritize incoming security vulnerability reports from the bug bounty initiative.

• Effectively communicate with security researchers to clarify ambiguous reports, enhance report clarity, and foster engagement with top hackers.

• Comprehend the underlying causes of security vulnerabilities to assist product and engineering teams in addressing them, while advising on appropriate mitigation strategies.

• Manage the lifecycle of submissions until resolution, coordinating with product and engineering stakeholders.

• Serve as the security liaison between external researchers and internal teams to ensure swift and effective remediation.

• Execute comprehensive data analysis on bug reports and vulnerability trends to identify systemic risks and inform new security initiatives.

• Offer tactical assistance for vulnerability management triage processes to support the team as necessary.

• Develop and implement enhancements to the overall bug bounty program.

• Provide input and requirements for tool development to improve triage and security workflows, capitalizing on automation opportunities.

⛳️ Requirements

• Demonstrated ability to track bug reports and accurately assess security vulnerabilities.

• Knowledge of web security concerns and exploitation techniques (e.g., OWASP Top 10, CWEs).

• Proficient in offensive security tools (e.g., Burp Suite, custom scripting).

• Ability to adopt an attacker's perspective to grasp the impact of vulnerabilities.

• Skilled in clear communication, articulating technical concepts to a range of stakeholders.

• Experience in one of the following fields: bug bounty programs or triaging security vulnerability reports, familiarity with Stripe products, and general security knowledge.

🏝️ Benefits

• Unlimited paid time off.

• Health insurance.

• Retirement plan options.

• Opportunities for professional development.