Security Analyst

Job Summary

Joining a dynamic security research team, the full-time remote Security Analyst will assess and validate web application vulnerabilities, confirm exploitability, and deliver clear reports to help customers understand and remediate their risks.

Key responsibilities

• Assess and validate web application vulnerabilities and confirm exploitability across various targets
• Reproduce findings using tools like Burp Suite and rate severity using established frameworks such as CVSS and OWASP
• Write clear, accurate customer-facing reports and remediation guidance based on findings

Required qualifications

• 2 or more years of hands-on experience with web application vulnerabilities through bug bounty, penetration testing, or application security
• Solid understanding of OWASP Top 10 and common web vulnerability classes, with practical experience in identifying them
• Experience reproducing and validating findings manually in ambiguous environments
• Familiarity with tools like Burp Suite and browser developer tools for hands-on verification
• Strong written communication skills to clearly describe vulnerabilities and remediation steps