This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Bug Bounty Security Researcher based in Netherlands. This is an ...
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Bug Bounty Security Researcher based in Netherlands. This is an ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Senior Security Engineer, Bug Bounty
$117K - $160K/yr
We are looking for a security engineer to own, manage and administer the Mozilla Web Bug Bounty program and work with Mozilla product and SIRT teams to ensure risk mitigation of security incidents ...
Senior Security Engineer, Bug Bounty
$117K - $160K/yr
We are looking for a security engineer to own, manage and administer the Mozilla Web Bug Bounty program and work with Mozilla product and SIRT teams to ensure risk mitigation of security incidents ...
Senior Security Engineer, Bug Bounty
$117K - $160K/yr
We are looking for a security engineer to own, manage and administer the Mozilla Web Bug Bounty program and work with Mozilla product and SIRT teams to ensure risk mitigation of security incidents ...
Senior Security Engineer, Bug Bounty
$117K - $160K/yr
We are looking for a security engineer to own, manage and administer the Mozilla Web Bug Bounty program and work with Mozilla product and SIRT teams to ensure risk mitigation of security incidents ...
Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes. Qualifications Twilio values diverse ...
Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes. Qualifications Twilio values diverse ...
Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes. Qualifications Twilio values diverse ...
Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes. Qualifications Twilio values diverse ...
Product Security Engineer (PSIRT - Product Security Incident Response Team)
Foster City, CA · On-site
$180K - $325K/yr
Manage intake from bug bounty platforms (HackerOne preferred), customer reports, automated scanners, pentest reports, and coordinated disclosure channels. * Independently validate, reproduce ...
Product Security Engineer (PSIRT - Product Security Incident Response Team)
Foster City, CA · On-site
$180K - $325K/yr
Manage intake from bug bounty platforms (HackerOne preferred), customer reports, automated scanners, pentest reports, and coordinated disclosure channels. * Independently validate, reproduce ...
Senior Security Engineer
Los Angeles, CA · On-site
$123K - $169K/yr
Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and ...
Senior Security Engineer
Los Angeles, CA · On-site
$123K - $169K/yr
Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and ...
Infrastructure Security Engineer
Charleston, WV · On-site
$132K/yr
... management programs. You will own the tooling that continuously tests our environment - bug bounty, agentic red team, CSPM, and vulnerability scanners - turn the output of those platforms into a ...
Infrastructure Security Engineer
Charleston, WV · On-site
$132K/yr
... management programs. You will own the tooling that continuously tests our environment - bug bounty, agentic red team, CSPM, and vulnerability scanners - turn the output of those platforms into a ...
Software Engineer, Security
San Francisco, CA · On-site
$250K - $350K/yr
You will build and operate the security program across infrastructure security, application security, vulnerability management, penetration testing, bug bounty operations, and engineering support for ...
Software Engineer, Security
San Francisco, CA · On-site
$250K - $350K/yr
You will build and operate the security program across infrastructure security, application security, vulnerability management, penetration testing, bug bounty operations, and engineering support for ...
... management programs. You will own the tooling that continuously tests our environment - bug bounty, agentic red team, CSPM, and vulnerability scanners - turn the output of those platforms into a ...
... management programs. You will own the tooling that continuously tests our environment - bug bounty, agentic red team, CSPM, and vulnerability scanners - turn the output of those platforms into a ...
Senior Security Engineer - Product Security
Charlotte, NC · On-site
$111K - $153K/yr
This role is responsible for identifying and mitigating application security risks, conducting security assessments, managing TaxSlayer's bug bounty program, and supporting compliance and risk ...
Senior Security Engineer - Product Security
Charlotte, NC · On-site
$111K - $153K/yr
This role is responsible for identifying and mitigating application security risks, conducting security assessments, managing TaxSlayer's bug bounty program, and supporting compliance and risk ...
Senior Product Security Engineer
San Jose, CA · On-site
$134K - $184K/yr
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
Senior Product Security Engineer
San Jose, CA · On-site
$134K - $184K/yr
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
Bug Bounty Program Management: Own and expand Vercel's bug bounty program. You will triage and validate incoming vulnerability reports from the security researcher community, ensure critical issues ...
Bug Bounty Program Management: Own and expand Vercel's bug bounty program. You will triage and validate incoming vulnerability reports from the security researcher community, ensure critical issues ...
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
Senior Product Security Engineer
San Jose, CA · On-site
$134K - $184K/yr
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
Senior Product Security Engineer
San Jose, CA · On-site
$134K - $184K/yr
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
... Bug Bounty program, working closely with internal engineering and security teams to ensure timely, accurate triage and resolution, managing automation workflows, supporting live hacking events ...
Software Engineer, Security
San Francisco, CA · On-site
$250K - $350K/yr
Manage recurring penetration tests and drive findings through remediation. * Operate the bug bounty program, triage vulnerability reports, and coordinate responses. * Partner with engineering on ...
Quick apply
Software Engineer, Security
San Francisco, CA · On-site
$250K - $350K/yr
Manage recurring penetration tests and drive findings through remediation. * Operate the bug bounty program, triage vulnerability reports, and coordinate responses. * Partner with engineering on ...
Bug Bounty Manager information
What is a bug bounty manager?
Bug Bounty Managers are professionals responsible for overseeing bug bounty programs, which incentivize security researchers to find and report vulnerabilities in a company's software or systems. They coordinate the design, implementation, and management of these programs, ensuring that reported issues are validated, prioritized, and addressed efficiently. Bug Bounty Managers also communicate with security researchers, internal security teams, and stakeholders to improve the organization's security posture. Their role is crucial in fostering a collaborative relationship between the organization and the security community.
What does a bug bounty manager do?
A Bug Bounty Manager typically spends the week overseeing vulnerability reports, coordinating with security researchers, and prioritizing remediation efforts with engineering teams. They review incoming submissions, validate findings, and communicate with both internal stakeholders and external participants to ensure clear understanding and timely resolution of issues. Collaboration is key in this role, as managers often work closely with developers, legal, and compliance teams to align on security priorities and program updates. Additionally, they may analyze program metrics and provide feedback to improve the bounty process.
What are the key skills and qualifications needed to thrive as a bug bounty manager?
To thrive as a Bug Bounty Manager, you need expertise in cybersecurity, vulnerability management, and a solid understanding of software development, typically supported by a degree in computer science or related field. Familiarity with bug bounty platforms (such as HackerOne or Bugcrowd), vulnerability tracking tools, and relevant certifications like CISSP or CEH is important. Strong communication, analytical thinking, and stakeholder management skills help you coordinate between security researchers and internal teams. These skills ensure effective vulnerability reporting, timely remediation, and the overall security posture of the organization.
What is the difference between Bug Bounty Manager vs Security Analyst?
| Aspect | Bug Bounty Manager | Security Analyst |
|---|---|---|
| Required Credentials | Certifications like OSCP, CEH, or CISSP; experience in bug bounty programs | Certifications such as CISSP, GIAC, or CEH; strong knowledge of security protocols |
| Work Environment | Focus on managing bug bounty programs, coordinating with researchers, and analyzing reports | Monitoring security systems, conducting vulnerability assessments, and incident response |
| Employer & Industry Usage | Tech companies, cybersecurity firms, organizations running bug bounty programs | Corporate security teams, government agencies, consulting firms |
The Bug Bounty Manager primarily oversees bug bounty initiatives, managing researcher collaborations and triaging reports. In contrast, a Security Analyst focuses on analyzing security threats, conducting assessments, and maintaining overall security posture. Both roles require security certifications and a strong understanding of vulnerabilities, but their daily tasks and focus areas differ significantly.
More about Bug Bounty Manager jobs
What cities are hiring for Bug Bounty Manager jobs?
Cities with the most Bug Bounty Manager job openings:
What are the most commonly searched types of Bug Bounty jobs?
The most popular types of Bug Bounty jobs are:
What states have the most Bug Bounty Manager jobs?
States with the most job openings for Bug Bounty Manager jobs include:
What are popular job titles related to Bug Bounty Manager jobs?
For Bug Bounty Manager jobs, the most frequently searched job titles are:
Bug Bounty Security Researcher
On-site, Remote
Jobgether
Contractor
Posted 9 days ago
Job description
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Bug Bounty Security Researcher based in Netherlands.
This is an exciting security research opportunity for a skilled professional passionate about discovering vulnerabilities and strengthening real-world application security.
You will investigate software applications, systems, and networks to uncover security weaknesses before they can be exploited maliciously.
The role combines offensive security research, creative attack development, vulnerability exploitation, and detailed technical reporting.
You will work across web, mobile, and network security environments while participating in private and public bug bounty programs.
Your findings will directly contribute to improving security products and services and protecting customers against emerging threats.
The position offers flexibility to work independently, explore challenging targets, and be rewarded for high-impact vulnerabilities.
This opportunity is ideal for a curious and analytical security researcher who enjoys continuous learning and responsible vulnerability disclosure.
Accountabilities
- Conduct thorough security research across target applications, systems, and networks to identify vulnerabilities and potential attack paths.
- Develop and execute customized attack vectors using techniques such as fuzzing, SQL injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Remote Code Execution.
- Safely validate and exploit discovered vulnerabilities while following responsible testing and disclosure practices.
- Analyze application and infrastructure behavior to identify weaknesses that may not be apparent through standard automated testing.
- Produce clear and comprehensive vulnerability reports containing technical descriptions, proof-of-concept code or evidence, severity information, and reproducible steps.
- Participate in ongoing bug bounty programs and private security research engagements.
- Share security findings and insights that can help improve products, services, and overall vulnerability management practices.
- Continuously research new attack techniques, tools, vulnerabilities, and security trends to improve testing effectiveness.
- Contribute to a collaborative security environment focused on identifying and responsibly addressing real-world threats.
Requirements
- At least 1 year of professional or demonstrable experience in security research, penetration testing, vulnerability assessment, or a related field.
- Strong understanding of computer systems, networks, web applications, and software security.
- Practical knowledge of offensive security methodologies and vulnerability discovery techniques.
- Experience with programming or scripting languages such as Python, C++, JavaScript, and HTML.
- Familiarity with security tools including Burp Suite, OWASP ZAP, Nmap, and Kali Linux.
- Experience participating in bug bounty programs and applying responsible disclosure practices.
- Strong analytical, investigative, and problem-solving abilities.
- Excellent technical communication and documentation skills, with the ability to clearly explain complex vulnerabilities.
- Relevant application security certifications such as Burp Suite Certified Practitioner (BSCP), Offensive Security Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT), or Offensive Security Certified Professional (OSCP) are highly valued.
- 3+ years of experience in security research, penetration testing, or vulnerability assessment is a strong advantage.
- A recognized public bug bounty profile with awarded vulnerability reports is preferred.
- Recognized contributions to Common Vulnerabilities and Exposures (CVEs) are a plus.
- Strong sense of responsibility and commitment to ethical security research.
Benefits
- Flexible freelance engagement allowing you to work according to your own schedule.
- Bounty awards for valid and accepted vulnerability reports.
- Weekly payments for valid reports following successful triage.
- Recognition for high-quality submissions through leaderboards both on and outside the platform.
- Opportunities to perform real-world penetration testing across web application, mobile, and network security.
- Access to private and exclusive bug bounty programs.
- Opportunity to work on diverse targets and investigate high-impact security vulnerabilities.
- Collaborative, empathy-led security culture focused on improving internet security.
- Continuous exposure to modern offensive security techniques, tools, and emerging vulnerabilities.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
apply for this job