ZipRecruiter

Log In

1

Freelance Bug Bounty Program Jobs in Oregon (NOW HIRING)

ClickHouse

OR

$114K - $156K/yr

Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing * Drive implementation and usage of engineering security tools - static, dynamic ...

Tines

Senior Product Security Engineer

OR · On-site +1

Contribute to our vulnerability management program, including triaging bug bounty and vulnerability disclosure reports and driving remediation efforts. * Security Automation : Develop and implement ...

(ISC)2

Coordinate with third-party security vendors for external assessments and bug bounty program management where applicable. Security Engineering * Own remediation follow-through: translate pen test ...

Career Opportunities | (ISC)²

Coordinate with third-party security vendors for external assessments and bug bounty program management where applicable. Security Engineering * Own remediation follow-through: translate pen test ...

iHerb

Principal Application Security Engineer

OR · Remote

$58.75 - $78.50/hr

Drive our security assessment, penetration testing and bug bounty programs * Participate in security incident response In order to be successful in this role you must have: * Demonstrated technical ...

Temporal Technologies

OR

$180K - $225K/yr

Triage Bug Bounty findings and responsibility disclosed vulnerabilities. * Able to participate in ... Running a Security Champions program. * Open Source automation or automation projects. * Expertise ...

Ivanti

Senior Offensive Security Engineer

OR · On-site +1

$114K - $156K/yr

... program and encourage participation. * Receive and triage vulnerability reports submitted by external researchers through various channels, such as email, web form, or bug bounty platform.

BetterHelp

OR · On-site

Strong experience with code review, security reviews, security architecture, pentesting, and bug bounty programs * Experience working in full-stack projects * Experience with discovering and fixing ...

Upstart

OR

$114K - $156K/yr

... coordination, bug bounty intake, and prioritization of findings into durable engineering ... Experience leading security engineering programs in at least two of the following domains ...

BetterHelp

OR

Strong background in offensive security (red team, penetration testing, or bug bounty) * Deep ... Holistic perks program (including free therapy, employee wellness, and more) * Excellent health ...

All JobsBug Bounty Program JobsFreelance Bug Bounty Program JobsFreelance Bug Bounty Program Jobs in Oregon

Freelance Bug Bounty Program information

What is a freelance bug bounty program?

Freelance bug bounty programs are initiatives run by companies or platforms that invite independent security researchers—often called ethical hackers—to identify and report vulnerabilities in their software or systems. Participants work on a freelance basis, choosing which programs to join and which vulnerabilities to hunt for, and are typically rewarded with monetary payouts or recognition for valid findings. This model helps organizations discover and fix security issues before they can be exploited maliciously, while providing freelancers with income and experience in cybersecurity. Anyone with the necessary skills can participate, making it a flexible career or side job for security enthusiasts.

What are the key skills and qualifications needed to thrive as a freelance bug bounty hunter?

To thrive as a Freelance Bug Bounty Hunter, you need a solid understanding of web application security, programming/scripting languages, and vulnerability assessment methodologies—often demonstrated by hands-on experience or certifications like OSCP. Familiarity with tools such as Burp Suite, Nmap, Metasploit, and various bug bounty platforms is essential for effective testing and reporting. Standout soft skills include analytical thinking, persistence, attention to detail, and clear written communication for submitting thorough vulnerability reports. These skills are crucial for identifying and responsibly disclosing security flaws, earning rewards, and building a strong reputation in the cybersecurity community.

What are some common challenges faced by freelancers participating in bug bounty programs, and how can they be overcome?

Freelancers in bug bounty programs often face challenges such as intense competition from other researchers, staying updated with the latest security vulnerabilities, and navigating varying program rules. To overcome these, it's important to continually hone your technical skills, engage with the security community for knowledge sharing, and thoroughly review each program's scope and guidelines before submitting reports. Building a reputation for high-quality, well-documented submissions can also help you stand out and secure more consistent rewards.

What is the difference between Freelance Bug Bounty Program vs Freelance Penetration Tester?

AspectFreelance Bug Bounty ProgramFreelance Penetration Tester
CredentialsKnowledge of security testing, bug reportingCertifications like OSCP, CEH, CISSP often preferred
Work EnvironmentRemote, project-based, online platformsRemote or on-site, client-specific engagements
Industry UsageTech companies, cybersecurity platformsConsulting firms, corporate security teams
Search & Comparison IntentFocus on bug bounty programs, online testingFocus on security assessments, penetration testing

While both roles involve security testing, Freelance Bug Bounty Programs primarily focus on identifying vulnerabilities through online platforms and reporting bugs, often without formal certifications. Freelance Penetration Testers conduct comprehensive security assessments, often requiring certifications and on-site work. The choice depends on your skills, certifications, and preferred work environment.

How much do freelance bug bounty program hunters make?

Freelance bug bounty hunters can earn from a few hundred to several thousand dollars per vulnerability, with top performers sometimes making over $100,000 annually. Earnings depend on the severity of the bugs found, the scope of the program, and the hunter's skills in security testing and tools like Burp Suite or Burp Suite, as well as their experience and reputation in the community.
What are the most commonly searched types of Bug Bounty Program jobs in Oregon? The most popular types of Bug Bounty Program jobs in Oregon are:
What are popular job titles related to Freelance Bug Bounty Program jobs in Oregon? For Freelance Bug Bounty Program jobs in Oregon, the most frequently searched job titles are:
What job categories do people searching Freelance Bug Bounty Program jobs in Oregon look for? The top searched job categories for Freelance Bug Bounty Program jobs in Oregon are:
What cities in Oregon are hiring for Freelance Bug Bounty Program jobs? Cities in Oregon with the most Freelance Bug Bounty Program job openings:
Freelance Bug Bounty Program jobs near you

Senior Product Security Engineer

ClickHouse

OR

$114K - $156K/yr

Full-time

Posted 8 days ago

Job description

About the team 

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our engineering and product teams in improving the security posture of our platforms and services. 

What you will do:

  • Collaborate with engineering and product on improving existing and building new product features with focus on threat modeling, assurance and secure implementation, some examples of recent work include implementation of secure key management, passwordless authentication, m2m authentication, sandboxing and compute/network/storage isolation
  • Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage a wide range of vulnerabilities reported via our bug bounty program, responsible disclosure, GitHub Issues covering web, API and server - client assets including low level memory issues like heap or buffer overflows
  • Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
  • Drive implementation and usage of engineering security tools - static, dynamic code analysis, dependency checks, code licensing compliance (working knowledge of Snyk, Semgrep, GitHub CodeQL)
  • Nurture the engineering - security relationship, identify and implement process and technology improvements
  • Handle information security events and incidents across ClickHouse products and services
  • Develop processes, tooling and automation to scale security processes and mitigate risks to the business

What you bring along:

  • Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as, in some cases, implementation work across distributed systems covering web, API, client/server assets
  • Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium, Crossplane
  • Experience implementing and operating engineering security tools and processes (e.g. static / dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, client and network fuzzing tools)
  • Significant development and automation experience, ability to work with C++ code preferred
  • Security as code mindset, with focus on solving problems with automation and scale in mind

Bonus Points:

  • BS, MS, or PhD in Computer Science or related field
  • Previous contributions to open source projects
  • Security or cloud related certifications (AWS, GCP, Azure)

Apply