Security Analyst

The role

You will work hands-on with web application vulnerabilities. You will assess findings, confirm exploitability, rate severity, and deliver reports to customers.

What you will do

• Assess and validate web application vulnerabilities and confirm exploitability and scope
• Reproduce findings hands-on using tools like Burp Suite
• Rate severity accurately using established frameworks such as CVSS and OWASP
• Write clear, accurate, customer-facing finding descriptions and remediation guidance
• Maintain consistent standards across a high volume of findings
• Surface patterns, edge cases, and unusual behaviors to the broader team
• Identify patterns across findings and share feedback on how Sybil can improve

Required qualifications

• 2 or more years of hands-on experience with web application vulnerabilities through bug bounty, penetration testing, application security, or a similar role
• Solid, practical understanding of OWASP Top 10 and common web vulnerability classes
• Experience reproducing and validating findings manually, including in ambiguous or noisy environments
• Comfort with tools like Burp Suite, browser developer tools, or similar for hands-on verification
• Strong written communication
• Attention to detail and consistency
• Self-direction

Benefits

• meaningful equity

About the company

RunSybil is building Sybil, an AI-driven pentester that discovers vulnerabilities before they are exploited. The team includes experts from OpenAI, Meta, Mandiant, Palantir, Cruise, Trail of Bits, and Aptiv.