1

Freelance Bug Bounty Program Jobs in Georgia (NOW HIRING)

The role partners with AI governance, development teams, and external specialists (including consultants and bug bounty programs) to ensure comprehensive adversarial coverage of the Company's AI ...

Projects include reforming digital services that provide military families access to critical benefits, running bug bounty programs to identify vulnerabilities and better secure defense systems ...

Projects include reforming digital services that provide military families access to critical benefits, running bug bounty programs to identify vulnerabilities and better secure defense systems ...

Projects include reforming digital services that provide military families access to critical benefits, running bug bounty programs to identify vulnerabilities and better secure defense systems ...

Projects include reforming digital services that provide military families access to critical benefits, running bug bounty programs to identify vulnerabilities and better secure defense systems ...

Projects include reforming digital services that provide military families access to critical benefits, running bug bounty programs to identify vulnerabilities and better secure defense systems ...

Projects include reforming digital services that provide military families access to critical benefits, running bug bounty programs to identify vulnerabilities and better secure defense systems ...

Senior Engineer, Offensive Security

Atlanta, GA

$110K - $151K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

And it's a rare chance to do that hands-on inside a program that helps protect the health data of ... validation, or Bug Bounty, with a track record of delivering engagements end to end: scoping ...

Senior Engineer, Offensive Security

Atlanta, GA · On-site

$110K - $151K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

And it's a rare chance to do that hands-on inside a program that helps protect the health data of ... validation, or Bug Bounty, with a track record of delivering engagements end to end: scoping ...

Senior Engineer, Offensive Security

Atlanta, GA

$110K - $151K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

And it's a rare chance to do that hands-on inside a program that helps protect the health data of ... validation, or Bug Bounty, with a track record of delivering engagements end to end: scoping ...

Freelance Bug Bounty Program information

What is a freelance bug bounty program?

Freelance bug bounty programs are initiatives run by companies or platforms that invite independent security researchers—often called ethical hackers—to identify and report vulnerabilities in their software or systems. Participants work on a freelance basis, choosing which programs to join and which vulnerabilities to hunt for, and are typically rewarded with monetary payouts or recognition for valid findings. This model helps organizations discover and fix security issues before they can be exploited maliciously, while providing freelancers with income and experience in cybersecurity. Anyone with the necessary skills can participate, making it a flexible career or side job for security enthusiasts.

What are the key skills and qualifications needed to thrive as a freelance bug bounty hunter?

To thrive as a Freelance Bug Bounty Hunter, you need a solid understanding of web application security, programming/scripting languages, and vulnerability assessment methodologies—often demonstrated by hands-on experience or certifications like OSCP. Familiarity with tools such as Burp Suite, Nmap, Metasploit, and various bug bounty platforms is essential for effective testing and reporting. Standout soft skills include analytical thinking, persistence, attention to detail, and clear written communication for submitting thorough vulnerability reports. These skills are crucial for identifying and responsibly disclosing security flaws, earning rewards, and building a strong reputation in the cybersecurity community.

What are some common challenges faced by freelancers participating in bug bounty programs, and how can they be overcome?

Freelancers in bug bounty programs often face challenges such as intense competition from other researchers, staying updated with the latest security vulnerabilities, and navigating varying program rules. To overcome these, it's important to continually hone your technical skills, engage with the security community for knowledge sharing, and thoroughly review each program's scope and guidelines before submitting reports. Building a reputation for high-quality, well-documented submissions can also help you stand out and secure more consistent rewards.

What is the difference between Freelance Bug Bounty Program vs Freelance Penetration Tester?

AspectFreelance Bug Bounty ProgramFreelance Penetration Tester
CredentialsKnowledge of security testing, bug reportingCertifications like OSCP, CEH, CISSP often preferred
Work EnvironmentRemote, project-based, online platformsRemote or on-site, client-specific engagements
Industry UsageTech companies, cybersecurity platformsConsulting firms, corporate security teams
Search & Comparison IntentFocus on bug bounty programs, online testingFocus on security assessments, penetration testing

While both roles involve security testing, Freelance Bug Bounty Programs primarily focus on identifying vulnerabilities through online platforms and reporting bugs, often without formal certifications. Freelance Penetration Testers conduct comprehensive security assessments, often requiring certifications and on-site work. The choice depends on your skills, certifications, and preferred work environment.

How much do freelance bug bounty program hunters make?

Freelance bug bounty hunters can earn from a few hundred to several thousand dollars per vulnerability, with top performers sometimes making over $100,000 annually. Earnings depend on the severity of the bugs found, the scope of the program, and the hunter's skills in security testing and tools like Burp Suite or Burp Suite, as well as their experience and reputation in the community.

What are the most commonly searched types of Bug Bounty Program jobs in Georgia?

The most popular types of Bug Bounty Program jobs in Georgia are:

What are popular job titles related to Freelance Bug Bounty Program jobs in Georgia?

For Freelance Bug Bounty Program jobs in Georgia, the most frequently searched job titles are:

What job categories do people searching Freelance Bug Bounty Program jobs in Georgia look for?

The top searched job categories for Freelance Bug Bounty Program jobs in Georgia are:

What cities in Georgia are hiring for Freelance Bug Bounty Program jobs?

Cities in Georgia with the most Freelance Bug Bounty Program job openings:

Associate Application Security Engineer - Bug Bounty & Vulnerability Management

Truist

Atlanta, GA • On-site, Remote

$56.50 - $75.50/hr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 10 days ago


Truist rating

8.0

Company rating: 8.0 out of 10

Based on 119 frontline employees who took The Breakroom Quiz

71st of 171 rated banks


Job description

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)Please review the following job description:Manages and triages submissions to the Bug Bounty program, validating reported vulnerabilities, assessing impact and severity, and coordinating remediation efforts with internal teams. Applies cybersecurity expertise to analyze findings, identify trends, improve vulnerability response processes, and help strengthen the organization's overall security posture while continuously expanding technical knowledge of emerging threats and attack techniques.
***Telecommuting/Remote workstyle will be considered for well-qualified individuals located outside of the Truist footprint. Teammate will work hours supporting Eastern Standard Time***
For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

  • Reviews, validates, and triages vulnerability reports submitted through the Bug Bounty program, assessing risk, impact, exploitability, and business relevance.

  • Partners with product, engineering, and security teams to investigate reported findings, coordinate remediation efforts, and verify resolution of identified vulnerabilities.

  • Performs threat modeling, security testing, vulnerability analysis, and penetration testing activities to identify and assess security weaknesses across assigned platforms and services.

  • Investigates security issues escalated within the team, conducts root cause analysis, and drives corrective actions that reduce recurring vulnerabilities and systemic risks.

  • Provides technical guidance on vulnerability remediation, secure coding practices, and security design considerations to support secure-by-design principles.

  • Reviews emerging threats, attack techniques, and vulnerability trends from internal assessments, bug bounty submissions, and external research to improve security controls and defensive capabilities.

  • Supports the implementation and maintenance of security technologies, control frameworks, security baselines, and configuration standards across assigned systems and applications.

  • Works with internal stakeholders to prioritize remediation activities based on severity, exploitability, business impact, and regulatory requirements.

  • Assists with incident response, forensic investigations, and security assessments as needed, leveraging findings to improve detection, prevention, and response capabilities.

  • Tracks and reports on vulnerability remediation progress, recurring security issues, and program metrics to support risk management and continuous improvement efforts.

  • Plans and manages work activities to meet established objectives, continuously developing technical expertise in application security, vulnerability management, and offensive security techniques.

Qualifications
Required Qualifications
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  • Bachelor's degree or equivalent education, training, and work-related experience.

  • Minimum of 3 years of experience in security engineering or related cybersecurity roles.

  • Developing knowledge in cybersecurity principles, theories, and concepts.

  • Experience in software development lifecycle security practices.

  • Proficiency in implementing and managing information security technologies.

Preferred Qualifications

  • Experience participating in Bug Bounty Programs (BBP) and Vulnerability Disclosure Programs (VDP), including vulnerability triage, validation, and remediation coordination.

  • Active involvement in the bug bounty, security research, or threat hunting community, with a demonstrated passion for discovering, analyzing, and understanding emerging security threats and attack techniques.

  • Strong desire to continuously learn and expand technical expertise in application security, vulnerability research, offensive security methodologies, and security tooling.

  • Familiarity with security automation, threat detection technologies, emerging cybersecurity trends, and risk-based approaches to vulnerability management and remediation.

***Telecommuting/Remote workstyle will be considered for well-qualified individuals located outside of the Truist footprint. Teammate will work hours supporting Eastern Standard Time***

For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position.Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist's generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist's defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work


What Truist employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom


Truist logo

About Truist

Sourced by ZipRecruiter

Truist is combining distinctive personal service with investments in innovation to create transformational client experiences. We believe the unique blend of human touch and innovative technology will set us apart, instill confidence, and build deeper levels of trust with our clients

Industry

Finance and insurance

Company size

10,000+ Employees

Headquarters location

Charlotte, NC, US

Year founded

2019