Security Analyst

Job Summary

Joining a dynamic security research team, the full-time remote Security Analyst will assess and validate web application vulnerabilities, confirm exploitability, and deliver clear reports to help customers understand and mitigate their risks.

Key responsibilities

• Assess and validate web application vulnerabilities across various targets, confirming exploitability and scope
• Reproduce findings using tools like Burp Suite and rate severity using frameworks such as CVSS and OWASP
• Write clear, accurate customer-facing descriptions and remediation guidance for security practitioners and developers

Required qualifications

• 2 or more years of hands-on experience with web application vulnerabilities through bug bounty, penetration testing, or application security
• Solid understanding of OWASP Top 10 and common web vulnerability classes, with practical experience in identifying and confirming them
• Experience in manually reproducing and validating findings, especially in ambiguous environments
• Familiarity with tools like Burp Suite and browser developer tools for hands-on verification
• Strong written communication skills for describing vulnerabilities and remediation in plain language