Security Analyst

Join NCC Group as a Bug Bounty Analyst, where you will be the first line of validation for vulnerability submissions. You will work directly with the Bug Bounty researcher community, reproduce and validate submissions, and provide clients with technical writeups for actionable findings. This fully remote position offers the opportunity to engage with the security researcher community and contribute to projects that improve BBS' tooling, operational processes, and delivery quality.

• Act as the first line of validation for vulnerability submissions, working directly with the Bug Bounty researcher community to accurately reproduce and validate submissions.
• Assess the reproducibility, real-world security impact, and scope of reported issues to successfully filter submissions prior to escalation to the client.
• Communicate professionally and constructively with the security researcher community and Enterprise clients, ensuring that technical details are clearly conveyed.
• Vulnerability Management experience is a plus
• Excellent written and verbal communication skills
• Strong knowledge in OWASP Top 10
• Experience with SAST and DAST testing tools is a plus
• Recent professional experience that required regular use of a programming scripting language (E.g., Python, JavaScript)
• Proven experience in web application, network, and mobile application security testing
• Vulnerability Disclosure and Bug Bounty experience
• Software QA experience is a plus
• Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process