Security Analyst, Bug Bounty

Job Summary

Focused on the front lines of bug bounty triage and researcher engagement, the full-time remote Security Analyst, Bug Bounty will manage the end-to-end lifecycle of security vulnerability reports, drive the effectiveness of the bug bounty program, and collaborate with product and engineering teams to enhance Stripe's security posture.

Key responsibilities

• Analyze, assess, reproduce, and triage incoming security vulnerability reports from the bug bounty program
• Communicate effectively with security researchers to clarify reports and enhance engagement
• Coordinate with product and engineering teams to understand and resolve security vulnerabilities

Required qualifications

• Proven ability to triage security vulnerabilities and follow bug reports
• Familiarity with web security issues and exploit methodologies (e.g., OWASP Top 10, CWEs)
• Competence in offensive security tools (e.g., Burp Suite, custom scripting)
• Experience in bug bounty programs or triaging security vulnerability reports
• Proficient in clear communication of technical concepts to various stakeholders