The bug bounty program is an important pillar of this mission, acting as a critical line of defense in Stripe's security "immune system." What you'll do We seek a highly technical and detail-oriented ...
The bug bounty program is an important pillar of this mission, acting as a critical line of defense in Stripe's security "immune system." What you'll do We seek a highly technical and detail-oriented ...
The bug bounty program is an important pillar of this mission, acting as a critical line of defense in Stripe's security "immune system." What you'll do We seek a highly technical and detail-oriented ...
The bug bounty program is an important pillar of this mission, acting as a critical line of defense in Stripe's security "immune system." What you'll do We seek a highly technical and detail-oriented ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Technical Program Manager, Bug Bounty
Seattle, WA · On-site
$146K - $190K/yr
Amazon's Bug Bounty team is looking for a Technical Program Manager (TPM) to help us secure the services and applications that Amazon customers rely on every day. In this role, you'll drive complex ...
Product Security Engineer (PSIRT - Product Security Incident Response Team)
Foster City, CA · On-site
$180K - $325K/yr
Bug Bounty & Vulnerability Disclosure Program Management * Design and evolve the bug bounty program, including scope, rules, and reward structures. * Manage platform selection, private vs. public ...
Product Security Engineer (PSIRT - Product Security Incident Response Team)
Foster City, CA · On-site
$180K - $325K/yr
Bug Bounty & Vulnerability Disclosure Program Management * Design and evolve the bug bounty program, including scope, rules, and reward structures. * Manage platform selection, private vs. public ...
This includes hands-on ownership of Vercel's open source bug bounty program for these projects: triaging incoming reports, validating and reproducing findings, and driving fixes with the right ...
This includes hands-on ownership of Vercel's open source bug bounty program for these projects: triaging incoming reports, validating and reproducing findings, and driving fixes with the right ...
Lead the end to end technical onboarding and configuration of Bug Bounty, Vulnerability Disclosure, Red team and pentest programs for new and existing customers. * Translate customer security ...
Lead the end to end technical onboarding and configuration of Bug Bounty, Vulnerability Disclosure, Red team and pentest programs for new and existing customers. * Translate customer security ...
Product Security Engineer
San Francisco, CA · On-site +1
Own and evolve the bug bounty program: Manage the researcher-facing side (scope, policy, engagement) as well as the internal tooling, so every report gets resolved and makes the automated triage ...
Product Security Engineer
San Francisco, CA · On-site +1
Own and evolve the bug bounty program: Manage the researcher-facing side (scope, policy, engagement) as well as the internal tooling, so every report gets resolved and makes the automated triage ...
Application Security Engineer
$110K - $120K/yr
Manage a vulnerability management program, vulnerability scanning tools and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs. * Help operate and improve ...
Quick apply
Application Security Engineer
$110K - $120K/yr
Manage a vulnerability management program, vulnerability scanning tools and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs. * Help operate and improve ...
Application Security Engineer
Pittsburgh, PA · On-site
$110K - $120K/yr
Manage a vulnerability management program, vulnerability scanning tools and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs. * Help operate and improve ...
Application Security Engineer
Pittsburgh, PA · On-site
$110K - $120K/yr
Manage a vulnerability management program, vulnerability scanning tools and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs. * Help operate and improve ...
... bug bounty programs; leverage the researcher community in identifying potential vulnerabilities; validate, research, prioritize, and escalate reported vulnerabilities as appropriate; manage each ...
... bug bounty programs; leverage the researcher community in identifying potential vulnerabilities; validate, research, prioritize, and escalate reported vulnerabilities as appropriate; manage each ...
An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate ... Participation in CTF competitions, bug bounty programs, or security research of any kind. What we ...
Quick apply
An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate ... Participation in CTF competitions, bug bounty programs, or security research of any kind. What we ...
An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate ... Participation in CTF competitions, bug bounty programs, or security research of any kind. What we ...
An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate ... Participation in CTF competitions, bug bounty programs, or security research of any kind. What we ...
An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate ... Participation in CTF competitions, bug bounty programs, or security research of any kind. What we ...
An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate ... Participation in CTF competitions, bug bounty programs, or security research of any kind. What we ...
Senior Security Engineer
San Francisco, CA · On-site
$160K - $240K/yr
Hands-on experience in offensive security (eg, through bug bounty programs or CTFs) The salary range for this role is $160,000 - $240,000. The salary for this position is determined based on a ...
Senior Security Engineer
San Francisco, CA · On-site
$160K - $240K/yr
Hands-on experience in offensive security (eg, through bug bounty programs or CTFs) The salary range for this role is $160,000 - $240,000. The salary for this position is determined based on a ...
Archon Labs - Blockchain Developer
San Francisco, CA · On-site +1
Experience with formal verification, bug bounty programs, or audit coordination. * Familiarity with time-series and relational data models. * Exposure to infrastructure basics such as containers and ...
Archon Labs - Blockchain Developer
San Francisco, CA · On-site +1
Experience with formal verification, bug bounty programs, or audit coordination. * Familiarity with time-series and relational data models. * Exposure to infrastructure basics such as containers and ...
Senior Engineer, Application Security
Jacksonville, FL · On-site
$54.25 - $72.50/hr
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
Senior Engineer, Application Security
Jacksonville, FL · On-site
$54.25 - $72.50/hr
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
Senior Engineer, Application Security
Jacksonville, FL · On-site
$54.50 - $72.75/hr
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
Senior Engineer, Application Security
Jacksonville, FL · On-site
$54.50 - $72.75/hr
... bug bounty programs. * Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via ...
Entry Level Bug Bounty Program information
See salary details
$16.35 - $22.01
6% of jobs
$22.01 - $27.67
14% of jobs
$31.30 is the 25th percentile. Wages below this are outliers.
$27.67 - $33.33
7% of jobs
$33.33 - $38.99
1% of jobs
$38.99 - $44.65
13% of jobs
The median wage is $47.88 / hr.
$44.65 - $50.31
15% of jobs
$50.31 - $55.97
3% of jobs
$55.97 - $61.63
9% of jobs
$65.30 is the 75th percentile. Wages above this are outliers.
$61.63 - $67.29
11% of jobs
$67.29 - $72.95
15% of jobs
$72.95 - $78.61
6% of jobs
$16
$49
$78
How much do entry level bug bounty program jobs pay per hour?
What is the difference between Entry Level Bug Bounty Program vs Entry Level Penetration Tester?
| Aspect | Entry Level Bug Bounty Program | Entry Level Penetration Tester |
|---|---|---|
| Credentials | Basic cybersecurity knowledge, certifications like CompTIA Security+ | Similar certifications, possibly more technical training |
| Work Environment | Remote, freelance, or platform-based | Often in-house or consulting firms, some remote options |
| Industry Usage | Widely used in tech and cybersecurity sectors | Common in security consulting and IT firms |
| Search & Comparison Intent | Focus on crowdsourced vulnerability discovery | Focus on simulated or real-world security testing |
While both roles involve cybersecurity skills, an Entry Level Bug Bounty Program typically involves participating in online platforms to find vulnerabilities remotely, often on a freelance basis. An Entry Level Penetration Tester conducts more structured security assessments, often within organizations or consulting firms. Both require foundational cybersecurity knowledge, but their work environments and approaches differ significantly.
What does entry mean?
What is called entry?
Is it entry or entery?
What is the synonym of entry?

Job description
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies-from the world's largest enterprises to the most ambitious startups-use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.
About the team
In this role, you'll join Stripe's Vulnerability Management team, whose mission is to "Surface vulnerabilities at scale across Stripe." Our vision is to create a culture of continuous excellence in managing vulnerabilities. The bug bounty program is an important pillar of this mission, acting as a critical line of defense in Stripe's security "immune system."
What you'll do
We seek a highly technical and detail-oriented Security Analyst to join our team, focusing on the front lines of bug bounty triage and researcher engagement. In this role, you'll be responsible for the end-to-end lifecycle of security vulnerability reports from our bug bounty program. You'll own the overall effectiveness of Stripe's bug bounty program with autonomy to implement continuous improvements (e.g., researcher campaigns, scoring transparency).
You'll play a key role in understanding the root cause of vulnerabilities, coordinating timely resolutions, and directly impacting the security posture of Stripe's products. A core aspect of this role is developing a deep understanding of Stripe and acquired company products, assets, and their configuration to effectively assess and prioritize vulnerabilities.
Responsibilities
- Analyze, assess, reproduce, and triage incoming security vulnerability reports from the bug bounty program
- Communicate clearly and effectively with security researchers to follow up on unclear reports, drive report clarity, and increase engagement with top hackers
- Understand the root cause of security vulnerabilities to help product and engineering teams fix them, and advise on the right mitigation strategies
- Drive the lifecycle of submissions through to resolution, coordinating with product and engineering stakeholders
- Act as the security bridge between external researchers and internal teams to facilitate rapid and effective remediation
- Conduct in-depth data analysis on bug reports and vulnerability patterns to identify systemic risks and inform new security initiatives
- Provide tactical support for vulnerability management triage processes to augment the team as needed
- Prepare and implement improvements to the overall bug bounty program
- Provide feedback and requirements for tool development to enhance triage and security workflows, leveraging opportunities for automation
We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
- Proven ability to follow bug reports and accurately triage security vulnerabilities
- Familiarity with web security issues and exploit methodologies (e.g., OWASP Top 10, CWEs)
- Competent in offensive security tools (e.g., Burp Suite, custom scripting)
- Ability to think like an attacker to understand the impact of vulnerabilities
- Proficient in clear communication, conveying technical concepts to various stakeholders
- Experience in one of the following areas
- Bug bounty program or triaging security vulnerability reports
- Knowledge of Stripe products and general security expertise
- Experience in technical support, operations, or similar roles with technical systems exposure
- Prior participation in or experience with bug bounty programs
- Experience analyzing source code for security vulnerabilities
- Proficiency in scripting languages (e.g., Python, Ruby) for automation
- Familiarity with cloud-based services (e.g., AWS, GCP)
- Certifications such as OSWA or BSCP
About Stripe
Sourced by ZipRecruiter
Industry
Software development
Company size
1,001 - 5,000 Employees
Headquarters location
San Francisco, CA, US
Year founded
2010