ZipRecruiter

Log In

1

Freelance Bug Bounty Program Jobs in California (NOW HIRING)

SHEIN

Senior Security Engineer

Los Angeles, CA · On-site

$91K - $149K/yr

Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and ...

SHEIN

Senior Security Engineer

Los Angeles, CA · On-site

$123K - $169K/yr

Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and ...

vercel.com

Product Security Engineer

San Francisco, CA · On-site

$208 - $312/hr

Bug Bounty Program Management: Own and expand Vercel's bug bounty program. You will triage and validate incoming vulnerability reports from the security researcher community, ensure critical issues ...

Raydar

Software Engineer, Security

San Francisco, CA · On-site

$250K - $350K/yr

You will build and operate the security program across infrastructure security, application security, vulnerability management, penetration testing, bug bounty operations, and engineering support for ...

Raydar

Software Engineer, Security

San Francisco, CA · On-site

$250K - $350K/yr

Operate the bug bounty program, triage vulnerability reports, and coordinate responses. * Partner with engineering on secure design, code-level fixes, deployment patterns, secrets management, and ...

Persona

Product Security Engineer

San Francisco, CA · On-site

$120 - $160/hr

Shape Persona's presence in the security research community -- running the bug bounty program that powers it. Must-haves * 4+ years of software engineering experience. * 2+ years in product security.

Vercel

Product Security Engineer

San Francisco, CA · On-site +1

Own and evolve the bug bounty program: Manage the researcher-facing side (scope, policy, engagement) as well as the internal tooling, so every report gets resolved and makes the automated triage ...

MM International

Penetration Tester

San Francisco, CA · On-site

Experience in Red Teaming and bug bounty programs preferred Ideal Candidate: * 5-8 years of security testing experience * Proven ability to mentor teams and implement enterprise security solutions

Cohere

Manager, Security Engineering

San Francisco, CA · On-site +1

$320K - $385K/yr

Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty program * Security ...

next page

Showing results 1-20

All JobsBug Bounty Program JobsFreelance Bug Bounty Program JobsFreelance Bug Bounty Program Jobs in California

Freelance Bug Bounty Program information

What is a freelance bug bounty program?

Freelance bug bounty programs are initiatives run by companies or platforms that invite independent security researchers—often called ethical hackers—to identify and report vulnerabilities in their software or systems. Participants work on a freelance basis, choosing which programs to join and which vulnerabilities to hunt for, and are typically rewarded with monetary payouts or recognition for valid findings. This model helps organizations discover and fix security issues before they can be exploited maliciously, while providing freelancers with income and experience in cybersecurity. Anyone with the necessary skills can participate, making it a flexible career or side job for security enthusiasts.

What are the key skills and qualifications needed to thrive as a freelance bug bounty hunter?

To thrive as a Freelance Bug Bounty Hunter, you need a solid understanding of web application security, programming/scripting languages, and vulnerability assessment methodologies—often demonstrated by hands-on experience or certifications like OSCP. Familiarity with tools such as Burp Suite, Nmap, Metasploit, and various bug bounty platforms is essential for effective testing and reporting. Standout soft skills include analytical thinking, persistence, attention to detail, and clear written communication for submitting thorough vulnerability reports. These skills are crucial for identifying and responsibly disclosing security flaws, earning rewards, and building a strong reputation in the cybersecurity community.

What are some common challenges faced by freelancers participating in bug bounty programs, and how can they be overcome?

Freelancers in bug bounty programs often face challenges such as intense competition from other researchers, staying updated with the latest security vulnerabilities, and navigating varying program rules. To overcome these, it's important to continually hone your technical skills, engage with the security community for knowledge sharing, and thoroughly review each program's scope and guidelines before submitting reports. Building a reputation for high-quality, well-documented submissions can also help you stand out and secure more consistent rewards.

What is the difference between Freelance Bug Bounty Program vs Freelance Penetration Tester?

AspectFreelance Bug Bounty ProgramFreelance Penetration Tester
CredentialsKnowledge of security testing, bug reportingCertifications like OSCP, CEH, CISSP often preferred
Work EnvironmentRemote, project-based, online platformsRemote or on-site, client-specific engagements
Industry UsageTech companies, cybersecurity platformsConsulting firms, corporate security teams
Search & Comparison IntentFocus on bug bounty programs, online testingFocus on security assessments, penetration testing

While both roles involve security testing, Freelance Bug Bounty Programs primarily focus on identifying vulnerabilities through online platforms and reporting bugs, often without formal certifications. Freelance Penetration Testers conduct comprehensive security assessments, often requiring certifications and on-site work. The choice depends on your skills, certifications, and preferred work environment.

What are the most commonly searched types of Bug Bounty Program jobs in California?

The most popular types of Bug Bounty Program jobs in California are:

What are popular job titles related to Freelance Bug Bounty Program jobs in California?

For Freelance Bug Bounty Program jobs in California, the most frequently searched job titles are:

What job categories do people searching Freelance Bug Bounty Program jobs in California look for?

The top searched job categories for Freelance Bug Bounty Program jobs in California are:

What cities in California are hiring for Freelance Bug Bounty Program jobs?

Cities in California with the most Freelance Bug Bounty Program job openings:

Freelance Bug Bounty Program jobs near you
Infographic showing various Freelance Bug Bounty Program job openings in California as of August 2026, with employment types broken down into 69% Full Time, and 31% Contract. Highlights an 90% In-person, and 10% Remote job distribution.

Senior Security Engineer

SHEIN

Los Angeles, CA • On-site

$91K - $149K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 7 days ago

Job description

About SHEIN
SHEIN is a global online fashion and lifestyle retailer, offering SHEIN branded apparel and products from a global network of vendors, all at affordable prices. Headquartered in Singapore, with more than 15,000 employees operating from offices around the world, SHEIN is committed to making the beauty of fashion accessible to all, promoting its industry-leading, on-demand production methodology, for a smarter, future-ready industry.
Position Summary
We are seeking a hands-on Application Security Engineer to join our Security Engineering team in Los Angeles. You will play a key role in safeguarding our products and infrastructure by running our bug bounty program, coordinating third-party penetration testing, handling internal security requests, participating in red/blue team exercises, and helping shape our emerging AI security practices.
Job Responsibilities
  • Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and triage teams, validating vulnerabilities, and driving remediation with engineering teams.
  • Third-Party Penetration Testing: Coordinate and manage engagements with external penetration testing vendors, scope assessments, review deliverables, and track remediation to closure.
  • Internal Security Testing Tickets: Own and execute internal security testing requests (tickets), including web/mobile application vulnerability assessments (black-box, grey-box, and white-box).
  • Red Team / Adversarial Exercises: Participate in offensive and defensive security exercises (attack & defense drills) to strengthen our overall security posture.
  • AI Security: Contribute to AI/LLM application security efforts, including LLM security testing, AI-assisted security automation, and assessing emerging AI-related threats.
  • Provide actionable remediation guidance and clear communication to engineering teams, security leadership, and stakeholders.

Job Requirements
  • Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent practical experience).
  • Solid understanding of the OWASP Top 10 and common web/mobile application vulnerabilities.
  • Hands-on experience with web application vulnerability assessments and penetration testing.
  • Familiarity with bug bounty platforms (e.g., HackerOne, Bugcrowd) and triage workflows.
  • Strong communication skills; ability to translate technical findings into clear remediation guidance.

Nice to Have
  • Professional proficiency in Mandarin Chinese (to collaborate effectively with global / Chinese-speaking teams).
  • Relevant certifications such as OSCP, GWAPT, or similar. Experience with AI/LLM security testing and security automation.
  • Experience coordinating third-party pentest vendors and managing remediation lifecycles.

Benefits and Perks
  • Bonus eligible
  • Healthcare (medical, dental, vision, prescription drugs)
  • Health Savings Account with Employer Funding
  • Flexible Spending Accounts (Healthcare and Dependent care)
  • Company-Paid Basic Life/AD&D insurance
  • Company-Paid Short-Term and Long-Term Disability
  • Voluntary Benefit Offerings (Voluntary Life/AD&D, Hospital Indemnity, Critical Illness, and Accident)
  • Employee Assistance Program
  • Business Travel Accident Insurance
  • 401(k) Savings Plan with discretionary company match and access to a financial advisor
  • Vacation, paid holidays, floating holiday and sick days
  • Employee discounts
  • Free weekly catered lunch
  • Dog-friendly office (available at select locations)
  • Free gym access (available at select locations)
  • Free swag giveaways
  • Annual Holiday Party
  • Invitations to pop-ups and other company events
  • Complimentary daily office snacks and beverages

#LI-ED1
Pay Range
$91,000-$149,600 USD

Apply