ZipRecruiter

Log In

1

Overnight Bug Bounty Program Jobs in California (NOW HIRING)

SHEIN

Senior Security Engineer

Los Angeles, CA · On-site

$91K - $149K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and ...

SHEIN

Senior Security Engineer

Los Angeles, CA · On-site

$123K - $169K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and ...

DoorDash

Engineering Manager, Proactive Security

Los Angeles, CA · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Partner cross-functionally with Product Engineering, Legal, Security Engineering Platform, Data teams and XFN partners to execute rigorous, agent enabled cross-brand Bug Bounty Program, Penetration ...

Vercel

Product Security Engineer

San Francisco, CA · On-site +1

Own and evolve the bug bounty program: Manage the researcher-facing side (scope, policy, engagement) as well as the internal tooling, so every report gets resolved and makes the automated triage ...

MM International

Penetration Tester

San Francisco, CA · On-site

Experience in Red Teaming and bug bounty programs preferred Ideal Candidate: * 5-8 years of security testing experience * Proven ability to mentor teams and implement enterprise security solutions

Framework Ventures

Marketing Lead

San Carlos, CA · On-site

$120 - $160/hr

Own the go‑to‑market strategy for core products, including Managed Triage and Bug Bounty Program Subscriptions. * Define ideal customer profiles, build messaging architectures, and translate ...

Verkada

Staff+ Security Engineer, Core Command

San Mateo, CA · On-site

  • Medical

  • Dental

  • Vision

  • PTO

Create and operate a bug bounty program * Triage and recommend solutions for security bugs from tools, third party assessments and bug bounties * Collaborate with the CISO and security team to grow ...

Opal

Security & Compliance Lead

San Francisco, CA · On-site

$120K - $200K/yr

Own bug bounty / vulnerability disclosure program operations, including intake, triage coordination, SLA tracking, and reporting * Coordinate vulnerability remediation across security vendors ...

Zip

Senior Security Engineer

San Francisco, CA · On-site

$160K - $240K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Hands-on experience in offensive security (eg, through bug bounty programs or CTFs) The salary range for this role is $160,000 - $240,000. The salary for this position is determined based on a ...

next page

Showing results 1-20

All JobsBug Bounty Program JobsOvernight Bug Bounty Program JobsOvernight Bug Bounty Program Jobs in California

Overnight Bug Bounty Program information

What is an overnight bug bounty program?

An Overnight Bug Bounty Program is a cybersecurity initiative where companies invite ethical hackers to identify and report security vulnerabilities in their systems during a designated overnight period. These programs are often time-limited and focus on rapid discovery and remediation of critical issues while minimizing disruption to business operations. Participants are rewarded based on the severity and validity of the bugs they report, helping organizations improve their security posture quickly. This approach leverages the fresh perspective and expertise of the broader security community in a concentrated timeframe.

What are the typical challenges faced when working in an overnight bug bounty program role?

Working overnight in a bug bounty program often involves managing the difficulties of non-traditional hours, such as adjusting your sleep schedule and maintaining focus during late-night shifts. You may also encounter challenges in effectively communicating with global teams or program managers who operate during standard business hours. Additionally, handling urgent vulnerability reports and ensuring timely responses can be demanding, but it offers the opportunity to develop strong problem-solving skills and build a reputation in the cybersecurity community. Collaboration with other security researchers and clear documentation are key to success in this dynamic environment.

What are the key skills and qualifications needed to thrive as an overnight bug bounty program participant?

To excel in an Overnight Bug Bounty Program, you need strong knowledge of cybersecurity fundamentals, ethical hacking techniques, and vulnerability assessment, often backed by practical experience or relevant certifications such as CEH or OSCP. Familiarity with tools like Burp Suite, Metasploit, Nmap, and bug bounty platforms such as HackerOne or Bugcrowd is essential. Attention to detail, persistence, and clear written communication set top performers apart in this field. These skills and qualities are crucial to effectively identify, document, and report security flaws, ensuring both personal success and improved security for participating organizations.

What are the most commonly searched types of Bug Bounty Program jobs in California?

The most popular types of Bug Bounty Program jobs in California are:

What are popular job titles related to Overnight Bug Bounty Program jobs in California?

For Overnight Bug Bounty Program jobs in California, the most frequently searched job titles are:

What job categories do people searching Overnight Bug Bounty Program jobs in California look for?

The top searched job categories for Overnight Bug Bounty Program jobs in California are:

What cities in California are hiring for Overnight Bug Bounty Program jobs?

Cities in California with the most Overnight Bug Bounty Program job openings:

Overnight Bug Bounty Program jobs near you

Senior Security Engineer

SHEIN

Los Angeles, CA • On-site

$91K - $149K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 19 days ago

Job description

About SHEIN
SHEIN is a global online fashion and lifestyle retailer, offering SHEIN branded apparel and products from a global network of vendors, all at affordable prices. Headquartered in Singapore, with more than 15,000 employees operating from offices around the world, SHEIN is committed to making the beauty of fashion accessible to all, promoting its industry-leading, on-demand production methodology, for a smarter, future-ready industry.
Position Summary
We are seeking a hands-on Application Security Engineer to join our Security Engineering team in Los Angeles. You will play a key role in safeguarding our products and infrastructure by running our bug bounty program, coordinating third-party penetration testing, handling internal security requests, participating in red/blue team exercises, and helping shape our emerging AI security practices.
Job Responsibilities
  • Bug Bounty Program Management: Operate and manage our public/private bug bounty programs on platforms such as HackerOne, including triaging incoming reports, interfacing with security researchers and triage teams, validating vulnerabilities, and driving remediation with engineering teams.
  • Third-Party Penetration Testing: Coordinate and manage engagements with external penetration testing vendors, scope assessments, review deliverables, and track remediation to closure.
  • Internal Security Testing Tickets: Own and execute internal security testing requests (tickets), including web/mobile application vulnerability assessments (black-box, grey-box, and white-box).
  • Red Team / Adversarial Exercises: Participate in offensive and defensive security exercises (attack & defense drills) to strengthen our overall security posture.
  • AI Security: Contribute to AI/LLM application security efforts, including LLM security testing, AI-assisted security automation, and assessing emerging AI-related threats.
  • Provide actionable remediation guidance and clear communication to engineering teams, security leadership, and stakeholders.

Job Requirements
  • Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent practical experience).
  • Solid understanding of the OWASP Top 10 and common web/mobile application vulnerabilities.
  • Hands-on experience with web application vulnerability assessments and penetration testing.
  • Familiarity with bug bounty platforms (e.g., HackerOne, Bugcrowd) and triage workflows.
  • Strong communication skills; ability to translate technical findings into clear remediation guidance.

Nice to Have
  • Professional proficiency in Mandarin Chinese (to collaborate effectively with global / Chinese-speaking teams).
  • Relevant certifications such as OSCP, GWAPT, or similar. Experience with AI/LLM security testing and security automation.
  • Experience coordinating third-party pentest vendors and managing remediation lifecycles.

Benefits and Perks
  • Bonus eligible
  • Healthcare (medical, dental, vision, prescription drugs)
  • Health Savings Account with Employer Funding
  • Flexible Spending Accounts (Healthcare and Dependent care)
  • Company-Paid Basic Life/AD&D insurance
  • Company-Paid Short-Term and Long-Term Disability
  • Voluntary Benefit Offerings (Voluntary Life/AD&D, Hospital Indemnity, Critical Illness, and Accident)
  • Employee Assistance Program
  • Business Travel Accident Insurance
  • 401(k) Savings Plan with discretionary company match and access to a financial advisor
  • Vacation, paid holidays, floating holiday and sick days
  • Employee discounts
  • Free weekly catered lunch
  • Dog-friendly office (available at select locations)
  • Free gym access (available at select locations)
  • Free swag giveaways
  • Annual Holiday Party
  • Invitations to pop-ups and other company events
  • Complimentary daily office snacks and beverages

#LI-ED1
Pay Range
$91,000-$149,600 USD

Apply