21 days ago
Base Salary
$91k - $150k/yr
Responsibilities
- Manage public and private bug bounty programs on platforms such as HackerOne, including report triage, researcher communication, vulnerability validation, and remediation tracking.
- Coordinate third-party penetration-testing engagements, including scoping assessments, reviewing deliverables, and tracking remediation to closure.
- Own and execute internal security testing requests involving black-box, grey-box, and white-box web and mobile application assessments.
- Participate in red team, blue team, and attack-and-defense exercises.
- Contribute to LLM application security testing, AI-assisted security automation, and assessment of emerging AI-related threats.
- Provide actionable remediation guidance and communicate technical findings to engineering teams, security leadership, and stakeholders.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
- Solid understanding of the OWASP Top 10 and common web and mobile application vulnerabilities.
- Hands-on experience with web application vulnerability assessments and penetration testing.
- Familiarity with bug bounty platforms such as HackerOne and Bugcrowd and related triage workflows.
- Strong communication skills and ability to translate technical findings into clear remediation guidance.
- Professional proficiency in Mandarin Chinese is preferred.
- OSCP, GWAPT, or similar certification is preferred.
- Experience with AI/LLM security testing, security automation, third-party penetration-test vendor coordination, and remediation lifecycle management is preferred.
Benefits
- Bonus eligible.
- Medical, dental, vision, prescription drug, health savings account with employer funding, and flexible spending account benefits.
- Company-paid basic life/AD&D insurance, short- and long-term disability, and voluntary insurance offerings.
- Employee assistance program and business travel accident insurance.
- 401(k) savings plan with discretionary company match and access to a financial advisor.
- Vacation, paid holidays, floating holiday, and sick days.
- Employee discounts, free weekly catered lunch, complimentary daily office snacks and beverages, and free swag giveaways.
- Dog-friendly office and free gym access at select locations, plus annual holiday party, pop-ups, and other company events.
Categories
