Bug Bounty Analyst
Core
Assess and support severity assignment on reported vulnerabilities, coordinate remediation of findings from Bug Bounty & Vulnerability Disclosure Programs, and mature the program through onboarding new assets.
Role type
Vulnerability Management Analyst (Bug Bounty Program)
Builds
Mitigation plans, timelines, and remediation tracking for identified vulnerabilities
Domain
Cybersecurity / Vulnerability Management
Required skills
Vulnerability assessment, CVSS scoring, remediation planning, security framework knowledge (PCI, HIPAA, GDPR, NIST CSF), ticketing systems (ServiceNow, JIRA), Unix/Linux/Windows operations, intrusion detection, security incident event management, penetration testing basics, secure coding practices, cloud technologies
Preferred skills
Professional security certifications (Security+, PenTest, SSCP, CISM, CISA, CEH, CCSLP, GWEB, eJPT, OSCP), industry standard security compliance programs, web application assessment
Technologies
ServiceNow, JIRA, Unix, Linux, MAC, Windows, Intrusion Detection Systems, Security Incident Event Management Systems, Cloud Technologies
Responsibilities
Assess and support severity assignment on reported vulnerabilities, coordinate remediation of findings, analyze scanner failures, identify missing security controls, collaborate with Risk Management and Legal/Privacy offices, maintain runbooks
Seniority
Mid-level, independent contributor
