Security Analyst
- Posted 7 hours ago
- Be among the first 10 applicants
Job Description
Join our mission to make the digital world safer!
As a Bug Bounty–Focused Security Analyst, you'll work closely with our global community of ethical hackers, helping identify, validate, and escalate real-world vulnerabilities — ensuring organizations stay ahead of evolving cyber threats.
Your Role
- Review, validate, and triage vulnerability reports submitted by bug bounty hunters.
- Assess the impact and severity of findings, including CVSS scoring.
- Collaborate directly with ethical hackers to reproduce and understand vulnerabilities.
- Provide clear, actionable remediation guidance to clients.
- Perform targeted penetration testing to support and verify bug bounty findings.
- Identify duplicate, false positive, and low-quality submissions efficiently.
- Contribute to improving bug bounty program quality and researcher engagement.
- Stay updated with the latest exploitation techniques, bug bounty trends, and attack vectors.
What You'll Bring
- 1+ year of experience in Bug Bounty, VAPT, or Security Research.
- Active Bug Bounty profile (HackerOne, Bugcrowd, Synack, etc.).
- Strong hands-on experience in identifying real-world vulnerabilities.
- Solid understanding of OWASP Top 10, web & API security.
- Ability to think like an attacker and validate complex vulnerability chains.
- Strong analytical, communication, and report-writing skills.
- Proficiency in Linux, Windows, and macOS environments.
- Fluent in English
- Passion for ethical hacking and continuous learning.
Nice to Have
- Recognized Bug Bounty achievements (Hall of Fame, bounties, rankings).
- Certifications like CEH, OSCP, OSWE, eWPT, CPT, etc.
- Experience with automation, scripting, or custom testing tools.
Job Details
- Work Time: 11:30 AM to 8:30 PM
- Location: Mumbai
- Mode: Work From Office
More Info
Key Skills
Custom Testing Tools
Bug Bounty
Web API Security
CVSS Scoring
Windows
About Company
Skills:
threat modeling , vulnerability research , red teaming , API security, cloud security, Information Security, Cybersecurity, Application Security, Owasp, Penetration Testing, AI safety concepts, security frameworks, prompt engineering, large language models
Skills:
openvas , Wireshark, Metasploit, Nmap, Dns, Http, Windows, SSL, Vulnerability Assessment, Penetration Testing, Https, Burp Suite, Application Security, Infrastructure Security, Linux, Owasp Top 10, Tls, Nessus, CVSS, OWASP ZAP, CWEs, CVEs
Skills:
Vulnerability Management, Iso 27001, Gcp, Vapt, Azure, Penetration Testing, AWS, itgc, ITAC, IRDAI, Rbi, Sebi
Skills:
vulnerability assessment, Application Security, Penetration Testing, Security Architecture, integration with SOC, threat detection, infrastructure reviews, network traffic monitoring, GRC activities
Skills:
Linux, Information Security, Automation, Event Management, Consulting