Intermediate Security Analyst, Vulnerability Operations (North America)

About Our Client:
The organization operates in the DevSecOps industry, focusing on improving developer productivity, operational efficiency, and reducing security and compliance risks to accelerate digital transformation. It serves a large scale of users, including over 50 million registered users and more than half of the Fortune 100 companies, enabling them to deliver better and more secure software more quickly.
About the Opportunity:
The INTERMEDIATE SECURITY ANALYST, VULNERABILITY OPERATIONS is responsible for protecting customers by triaging security reports, managing vulnerabilities, and coordinating communications with security researchers, customers, and internal teams. This role supports the organization's product security efforts by collaborating with multiple teams to ensure effective vulnerability management and clear communication, contributing to the overall security and trustworthiness of the organization's software products.
Responsibilities:
Triage incoming bug bounty reports by reviewing quality, validating findings, assessing impact, identifying duplicates, and routing to appropriate teams
Manage vulnerabilities through assessment, remediation, and closure phases
Collaborate with engineers and development teams to gather technical details and clarify affected products and configurations
Support severity assessments using recognized frameworks and terminology such as CVE, CVSS, CWE, and OWASP
Communicate professionally with security researchers in coordinated vulnerability disclosure and bug bounty programs
Prepare information and maintain records for CVE assignments, supporting the organization's role as a CVE Numbering Authority
Represent the organization in CVE-related discussions and coordinate internal and external stakeholders
Draft and coordinate customer communications regarding security vulnerabilities and updates
Maintain accurate records of issues, communications, remediation status, and follow-ups
Monitor operational metrics to identify trends and improve response quality
Develop and improve documentation such as runbooks, procedures, and templates for vulnerability handling
Participate in incident handoffs, root cause analyses, lessons learned, and security reviews
Build expertise in product security incident response, bug bounty, vulnerability management, and coordinated disclosure
Requirements:
Early-career experience or equivalent education in cybersecurity, software engineering, IT, or related fields
Foundational understanding of software vulnerabilities and security concepts, including web applications, APIs, CI/CD, authentication, and authorization
Familiarity with security terminology like CVE, CVSS, CWE, OWASP Top 10, and coordinated vulnerability disclosure
Strong attention to detail and ability to prioritize multiple work items
Clear written and verbal communication skills for technical and non-technical audiences
Experience with bug bounty or vulnerability disclosure platforms (e.g., HackerOne, Bugcrowd)
Experience reviewing security reports, capture-the-flag exercises, vulnerability research, or security tooling
Familiarity with CVE assignment, CNA processes, security advisories, or vulnerability databases
Preferred: basic scripting, log analysis, issue tracking, data analysis, and experience writing technical documentation or customer communications
Pay Range and Compensation Package:
The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

Work arrangement
Yes