Security Analyst, Bug Bounty

7 hours, 53 minutes ago
Mid Level
Cybersecurity
Stripe

Stripe

Stripe is a global technology company that provides financial infrastructure for the internet. They offer a suite of APIs and tools for businesses to accept online and in-person payments, automate financial processes, and embed financial services in th...

Diversified Financial Services
5K-10K
Founded 2009
$8700M raised

Description

  • Analyze, assess, reproduce, and triage incoming security vulnerability reports from the bug bounty program.
  • Communicate with security researchers to clarify reports, improve report quality, and deepen engagement with top contributors.
  • Determine root causes of vulnerabilities and help product and engineering teams apply effective fixes and mitigations.
  • Drive submissions through the full resolution lifecycle and coordinate with product and engineering stakeholders.
  • Act as a bridge between external researchers and internal teams to support rapid remediation.
  • Conduct data analysis on bug reports and vulnerability patterns to identify systemic risks and guide new security initiatives.
  • Support vulnerability management triage processes as needed to help the team scale.
  • Improve the overall bug bounty program through continuous enhancements such as researcher campaigns and scoring transparency.
  • Provide feedback and requirements for tool development and automation to improve triage and security workflows.

Requirements

  • Proven ability to follow bug reports and accurately triage security vulnerabilities.
  • Familiarity with web security issues and exploit methodologies, including OWASP Top 10 and CWEs.
  • Competence with offensive security tools such as Burp Suite and custom scripting.
  • Ability to think like an attacker to assess the impact of vulnerabilities.
  • Strong communication skills and ability to explain technical concepts to different stakeholders.
  • Experience in bug bounty program work or triaging security vulnerability reports.
  • Knowledge of Stripe products and general security expertise is acceptable as an alternative area of experience.
  • Experience in technical support, operations, or similar roles with technical systems exposure is preferred.
  • Experience analyzing source code for security vulnerabilities is preferred.
  • Proficiency in scripting languages such as Python or Ruby for automation is preferred.
  • Familiarity with cloud-based services such as AWS or GCP is preferred.
  • Certifications such as OSWA or BSCP are preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Associate, Vulnerability Assessment

Coalfire 251-1K Internet Software & Services

Coalfire is hiring a Vulnerability Assessment Associate to identify, analyze, and report security vulnerabilities across systems, networks, and applications while supporting remediation and risk reduction efforts for clients.

AWS Azure Bash Cybersecurity GCP HIPAA PowerShell Python SOC
8 hours, 53 minutes ago

Information Security Analyst

Media.Monks 5K-10K Media

Monks is hiring an Information Security Analyst to protect customer and company data and support the organization’s security and compliance posture across a global business.

AWS Azure Cybersecurity Encryption GCP Linux macOS OpenID Connect SAML
8 hours, 53 minutes ago

Malware & Abuse Engineer

Kinsta® 251-1K IT Services

Kinsta is hiring a remote Malware & Abuse Engineer to protect its WordPress hosting platform by monitoring, investigating, and remediating malware, spam, abuse, and compliance issues for customers.

CDN DNS JavaScript Linux MariaDB MySQL Nginx PHP WordPress
9 hours, 8 minutes ago

Cyber Detection and Response Analyst, Asia Pacific

Control Risks 1K-5K Professional Services

Cyber Detection and Response Analyst at a global security team, supporting 24/7 threat detection, investigation, and response across a client environment.

AWS Azure CrowdStrike Cybersecurity GCP SIEM Splunk
9 hours, 23 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers