Security Analyst, Bug Bounty

Job Summary

Focused on the front lines of bug bounty triage and researcher engagement, the full-time remote Security Analyst, Bug Bounty will manage the end-to-end lifecycle of security vulnerability reports, driving continuous improvements and coordinating with product and engineering teams to enhance Stripe's security posture.

Key responsibilities

• Analyze, assess, reproduce, and triage incoming security vulnerability reports from the bug bounty program
• Communicate effectively with security researchers to clarify reports and increase engagement
• Coordinate with stakeholders to drive the lifecycle of submissions through to resolution

Required qualifications

• Proven ability to accurately triage security vulnerabilities from bug reports
• Familiarity with web security issues and exploit methodologies (e.g., OWASP Top 10, CWEs)
• Competence in offensive security tools (e.g., Burp Suite, custom scripting)
• Experience in bug bounty programs or triaging security vulnerability reports
• Proficient in clear communication of technical concepts to various stakeholders