Senior Vulnerability Analyst
Core
Manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments.
Role type
Senior IC application security engineer (vulnerability management & penetration testing)
Builds
Secure web, mobile, and API applications
Domain
Financial services / Cybersecurity
Required skills
application security, penetration testing, web security, mobile security, API security, OWASP Top 10, vulnerability validation, risk assessment, remediation guidance, bug bounty program management
Preferred skills
bug bounty experience, vulnerability disclosure program experience, security certifications
Technologies
Burp Suite, OWASP ZAP
Responsibilities
Manage vulnerability intake, validation, triage, and researcher engagement; conduct penetration testing; assess risk and prioritize findings; partner with engineering teams on remediation; develop reporting and metrics to measure program effectiveness
Seniority
Senior, hands-on IC
