ZipRecruiter

Log In

1

Overnight Bug Bounty Program Jobs (NOW HIRING)

Merge

Head of Security

San Francisco, CA · On-site

... Bug Bounty Program • Implement security controls across Merge, from infrastructure to CI • Implement and run manual and automated security practices to mitigate vulnerabilities • Assist with ...

Ramp

Security Engineer, Product

... our bug bounty program • Partner with engineering teams to design and deploy solutions which are inherently secure • Champion the use of tooling (linters, static analysis, posture assessment ...

MM International

Penetration Tester

San Francisco, CA · On-site

Experience in Red Teaming and bug bounty programs preferred Ideal Candidate: * 5-8 years of security testing experience * Proven ability to mentor teams and implement enterprise security solutions

Landry's

Senior Cybersecurity Engineer

Houston, TX · On-site

$109K - $149K/yr

... the bug bounty and responsible disclosure program, including vulnerability triage and researcher communications. • Evaluate AI-powered tools and agentic AI platforms from a security perspective ...

Verkada

Security Engineer, Core Command

San Mateo, CA · On-site

... bug bounty program • Triage and recommend solutions for security bugs from tools, third party assessments and bug bounties • Collaborate with the CISO and security team to grow the broader ...

New

MoonPay

Senior Security Engineer - Automation

OR · Remote

$117K - $160K/yr

We actively manage our Bug Bounty program, ensuring swift response and remediation, and leverage cutting-edge tools like Cloudflare's WAF to build robust defenses. We offer an extensive number of ...

MoonPay

Senior Application Security Engineer

Meridian, ID · Remote

$111K - $152K/yr

Investigate, triage, and respond to Bug Bounty program submissions, validating findings and working with engineering teams to drive timely remediation. * Own and continuously improve application ...

MoonPay

Senior Security Engineer - Automation

$117K - $160K/yr

We actively manage our Bug Bounty program, ensuring swift response and remediation, and leverage cutting-edge tools like Cloudflare's WAF to build robust defenses. We offer an extensive number of ...

MoonPay

Senior Security Engineer - Automation

New York, NY · On-site

$125K - $171K/yr

We actively manage our Bug Bounty program, ensuring swift response and remediation, and leverage cutting-edge tools like Cloudflare's WAF to build robust defenses. We offer an extensive number of ...

Replit

SOC Engineer

Foster City, CA · On-site

$180K - $250K/yr

Experience working with bug bounty programs or coordinated vulnerability disclosure workflows. * Experience in fast-paced, cloud-native, or AI/ML-driven environments. What We Value * Curiosity ...

Target

Lead Engineer, Penetration Tester

Minneapolis, MN · On-site

$132K - $238K/yr

Review and triage submissions from the Bug Bounty program; escalate critical findings to appropriate teams and help drive remediation * Contribute to threat modeling activities, providing expert ...

Merge

Security Engineer

San Francisco, CA · On-site

... our bug bounty program end to end: triage, response, remediation, and researcher communication • Partner with Engineering to embed secure design patterns and security review into how we ship ...

Merge

Security Engineer

Manhattan, NY · On-site

... our bug bounty program end to end: triage, response, remediation, and researcher communication • Partner with Engineering to embed secure design patterns and security review into how we ship ...

Accenture Federal Services

CNO Developer

Chantilly, VA · On-site

$129K - $177K/yr

Desire to contribute to CTF events, bug bounty programs, and speaking at the security conferences * Rapid Prototype Software Development Security Clearance: * Active TS/SCI level clearance. Must be ...

next page

Showing results 1-20

All JobsOvernight Bug Bounty Program Jobs

Overnight Bug Bounty Program information

See salary details

$16

$49

$78

How much do overnight bug bounty program jobs pay per hour?

As of Jun 21, 2026, the average hourly pay for overnight bug bounty program in the United States is $49.60, according to ZipRecruiter salary data. Most workers in this role earn between $31.73 and $66.83 per hour, depending on experience, location, and employer.

Which bug bounty pays the most?

In bug bounty programs, payouts vary depending on the severity and impact of the vulnerability, with high-impact bugs such as remote code execution or data breaches often earning the highest rewards, sometimes reaching hundreds of thousands of dollars. Platforms like HackerOne and Bugcrowd host programs that offer large bounties for critical vulnerabilities, especially from well-funded organizations or those with high security standards. Successful bug bounty hunters typically have strong technical skills, knowledge of security testing tools, and an understanding of the target company's infrastructure.

What is an Overnight Bug Bounty Program?

An Overnight Bug Bounty Program is a cybersecurity initiative where companies invite ethical hackers to identify and report security vulnerabilities in their systems during a designated overnight period. These programs are often time-limited and focus on rapid discovery and remediation of critical issues while minimizing disruption to business operations. Participants are rewarded based on the severity and validity of the bugs they report, helping organizations improve their security posture quickly. This approach leverages the fresh perspective and expertise of the broader security community in a concentrated timeframe.

Will Facebook pay $500 if you find a bug in their code?

As an Overnight Bug Bounty Program participant, Facebook offers monetary rewards for qualifying security vulnerabilities, with payouts varying based on the severity and impact of the bug. While some bounties can reach or exceed $500, the exact amount depends on the specific vulnerability and program guidelines. Participants should review Facebook's bug bounty policies for detailed payout information.

How do I join a bug bounty program?

To join an overnight bug bounty program, you typically need to register on the platform hosting the program, such as HackerOne or Bugcrowd, and agree to their rules. You should have skills in security testing, familiarity with bug tracking tools, and often a basic understanding of web or application security. Participation usually involves submitting identified vulnerabilities according to program guidelines and may require a valid account or profile setup.

What are the typical challenges faced when working in an overnight bug bounty program role?

Working overnight in a bug bounty program often involves managing the difficulties of non-traditional hours, such as adjusting your sleep schedule and maintaining focus during late-night shifts. You may also encounter challenges in effectively communicating with global teams or program managers who operate during standard business hours. Additionally, handling urgent vulnerability reports and ensuring timely responses can be demanding, but it offers the opportunity to develop strong problem-solving skills and build a reputation in the cybersecurity community. Collaboration with other security researchers and clear documentation are key to success in this dynamic environment.

What are the key skills and qualifications needed to thrive as an Overnight Bug Bounty Program participant, and why are they important?

To excel in an Overnight Bug Bounty Program, you need strong knowledge of cybersecurity fundamentals, ethical hacking techniques, and vulnerability assessment, often backed by practical experience or relevant certifications such as CEH or OSCP. Familiarity with tools like Burp Suite, Metasploit, Nmap, and bug bounty platforms such as HackerOne or Bugcrowd is essential. Attention to detail, persistence, and clear written communication set top performers apart in this field. These skills and qualities are crucial to effectively identify, document, and report security flaws, ensuring both personal success and improved security for participating organizations.

How much money can you make doing bug bounties?

The earnings for an Overnight Bug Bounty Program can vary widely, with top hackers earning hundreds of thousands of dollars annually by finding critical vulnerabilities. Most bug bounty hunters earn from a few hundred to several thousand dollars per bug, depending on the severity and scope of the vulnerabilities discovered, as well as their skill level and reputation in the community.
More about Overnight Bug Bounty Program jobs
What cities are hiring for Overnight Bug Bounty Program jobs? Cities with the most Overnight Bug Bounty Program job openings:
What are the most commonly searched types of Bug Bounty Program jobs? The most popular types of Bug Bounty Program jobs are:
What states have the most Overnight Bug Bounty Program jobs? States with the most job openings for Overnight Bug Bounty Program jobs include:
What job categories do people searching Overnight Bug Bounty Program jobs look for? The top searched job categories for Overnight Bug Bounty Program jobs are:
Overnight Bug Bounty Program jobs near you
Infographic showing various Overnight Bug Bounty Program job openings in the United States as of June 2026, with employment types broken down into 76% Full Time, 18% Part Time, and 6% Contract. Highlights an 76% In-person, and 24% Remote job distribution, with an average salary of $103,178 per year, or $49.6 per hour.
Head of Security

Head of Security

Merge

San Francisco, CA • On-site

Full-time

Posted 14 days ago

Job description

Job Summary:
Merge is the leading provider of agentic tools and customer-facing integrations for frontier LLMs, Fortune 500 organizations, and B2B SaaS companies. As the Director of Security at Merge, you will manage security programs, including infrastructure, compliance, and security automation, while ensuring that security is treated as a core practice by all employees.
Responsibilities:
• Create and drive the security roadmap
• Manage our compliance automation programs (SOC 2, ISO 27001, HIPAA, etc.). We’ve already achieved these using Drata, and while you have a team to support you, you will take the lead.
• Ensure all engineers and employees of Merge treat security as a core part of our practices
• Manage our Bug Bounty Program
• Implement security controls across Merge, from infrastructure to CI
• Implement and run manual and automated security practices to mitigate vulnerabilities
• Assist with security reviews, threat modeling, disaster recovery practice, and code reviews
Qualifications:
Required:
• 7+ years of security engineering experience
• Ownership or leadership within areas of security at previous organizations, infosec being a plus
• An overall excitement around building a more secure engineering function and organization
• Ability to manage security programs
• Experience with and a desire to code in at least one major programming language
• A thorough understanding of networking and infrastructure, including load balancing, VPNs, Zero Trust, HTTPS, DNS, etc.
• Experience with multi-tenant cloud environments
Company:
Merge is one API to add hundreds of integrations to your product Founded in 2020, the company is headquartered in San Francisco, USA, with a team of 51-200 employees. The company is currently Growth Stage.

Apply