Bug Bounty Security Researcher

The role

You will identify and report vulnerabilities in software applications, systems, and networks. You will develop custom attack vectors and document findings including proof-of-concept code.

What you will do

• Conduct thorough research on target systems, applications, and networks to identify potential vulnerabilities.
• Develop and execute custom attack vectors using various tools and techniques.
• Identify and exploit vulnerabilities in a responsible manner.
• Document all findings, including detailed descriptions, proof-of-concept code, and reproduction steps.
• Participate in regular bug bounty programs and contribute to the improvement of products and services.

Required qualifications

• 1 year of experience in security research, penetration testing, or vulnerability assessment.
• Strong understanding of computer systems, networks, and software applications.
• Some proficiency with programming languages (e.g., Python, C++, JavaScript, HTML).
• Some proficiency with offensive security tools (e.g., Burp Suite, OWASP ZAP, Nmap, Kali Linux).
• Experience with bug bounty programs and responsible disclosure practices.
• Excellent analytical and problem-solving skills.
• Strong communication and documentation skills.

Nice to have

• Relevant Application Security Certifications: BurpSuite Certified Practitioner (BSCP), Offensive Security Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT), Offensive Security Certifi
• 3+ years of experience in security research, penetration testing, or vulnerability assessment.
• Has an awarded and recognized public Bug Bounty profile
• Has recognized contributions to Common Vulnerabilities and Exposures (CVEs)

Benefits

• Bounty awards for accepted vulnerabilities
• Recognition for submitted reports on various leaderboards on and off platform
• Experience in performing real-world penetration testing in Web Application, Mobile and Network Security
• A collaborative and empathy-led culture
• A chance to participate in private, exclusive bug bounty programs

About the company

Inspectiv is a remote-first company dedicated to vulnerability management with a platform for Bug Bounty as a Service and Pentesting as a Service. It is a well-funded Series A company with top tier investors.