ZipRecruiter

Log In

2

Remote Bug Bounty Program Jobs (NOW HIRING)

Jobgether

... Remote Code Execution. * Safely validate and exploit discovered vulnerabilities while following ... Participate in ongoing bug bounty programs and private security research engagements. * Share ...

Mozilla

Senior Security Engineer, Bug Bounty

$117K - $160K/yr

What you'll do: * Own and scale Mozilla's web bug bounty program, including strategy ... D #LI-REMOTE Req ID: R3105 Hiring Ranges: US Tier 1 Locations $137,000-$183,000 USD US Tier 2 ...

Twilio

Staff Engineer - Offensive Security

Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad ... Location This role will be remote, but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Twilio

Staff Engineer - Offensive Security

Our dedication to remote-first work, and strong culture of connection and global inclusion means ... Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad ...

RainFocus

Cybersecurity Engineer (Remote)

Lehi, UT · On-site +1

Manage and triage our crowdsourced bug bounty program (BugCrowd) and monitor our external security posture rating (Bitsight). * Secure Development Collaboration: Act as the security voice in ...

RainFocus

Cybersecurity Engineer (Remote)

Lehi, UT · Remote

Manage and triage our crowdsourced bug bounty program (BugCrowd) and monitor our external security posture rating (Bitsight). * Secure Development Collaboration: Act as the security voice in ...

Ondo Finance

Senior Security Engineer - Product Security

$117K - $160K/yr

You can expect to take ownership of the bug bounty program, new feature to existing product reviews, and similar broad ownership of critical functions paired to a dedicated ProdSec lead. An AI-native ...

Ondo Finance

Senior Security Engineer - Product Security

$117K - $160K/yr

You can expect to take ownership of the bug bounty program, new feature to existing product reviews, and similar broad ownership of critical functions paired to a dedicated ProdSec lead. An AI-native ...

Vercel

Product Security Engineer

San Francisco, CA · On-site +1

If you're located beyond that distance, the role is fully remote. For location-specific details ... Own and evolve the bug bounty program: Manage the researcher-facing side (scope, policy, engagement ...

Cohere

Manager, Security Engineering

San Francisco, CA · On-site +1

... including managing our bug bounty program * Security Architecture Review: Collaborate with ... Remote US or Canada Full-Time Employees at Cohere enjoy these Perks: * A weekly lunch stipend of ...

Aptos

Information Security Engineer, Product

Respond to and triage reports from bug bounty programs. Minimum Qualifications * B.S. or M.S. in Computer Science, a related technical field, or equivalent experience. * 3+ years of experience in ...

Figma

Security Engineer

... bug bounty program. • Help respond to product security incidents. • Design and build technical systems to prevent spam, fraud, and abuse. • Partner closely with product teams to identify and ...

Figma

Security Engineer

... bug bounty program. • Help respond to product security incidents. • Design and build technical systems to prevent spam, fraud, and abuse. • Partner closely with product teams to identify and ...

next page

Showing results 1-20

All JobsRemote JobsFreelance JobsTechnology JobsRemote Bug Bounty Program Jobs

Remote Bug Bounty Program information

See salary details

$16

$49

$78

How much do remote bug bounty program jobs pay per hour?

As of Sep 12, 2026, the average hourly pay for remote bug bounty program in the United States is $49.60, according to ZipRecruiter salary data. Most workers in this role earn between $31.73 and $66.83 per hour, depending on experience, location, and employer.

What is a remote bug bounty program?

Remote Bug Bounty Programs are initiatives run by organizations that invite independent security researchers, or 'bug hunters,' to find and report vulnerabilities in their software or systems. These programs are conducted entirely online, allowing participants from around the world to contribute remotely. Companies offer monetary rewards or other incentives for valid and impactful security findings. This approach helps organizations strengthen their security by leveraging a global pool of ethical hackers, while participants gain recognition and compensation for their expertise.

What skills and qualifications are needed to thrive in a remote bug bounty program?

To thrive in a Remote Bug Bounty Program role, you need a strong background in cybersecurity, vulnerability assessment, and ethical hacking, often supported by experience in penetration testing and security certifications like OSCP or CEH. Familiarity with tools such as Burp Suite, Nmap, Metasploit, and various bug bounty platforms is essential. Attention to detail, persistence, effective communication, and self-motivation are standout soft skills for this position. These abilities are crucial for identifying and responsibly reporting security vulnerabilities that help organizations strengthen their defenses.

What are the biggest challenges faced by participants in a remote bug bounty program, and how can they be addressed?

One of the main challenges in remote bug bounty programs is staying motivated and disciplined without direct oversight, as participants often work independently. Additionally, understanding the specific security requirements and scope of each program can be complex, especially when dealing with varied platforms and reporting standards. To overcome these challenges, it's important to set personal goals, join online communities for peer support, and thoroughly review each program's documentation before starting. Effective communication with program coordinators can also help clarify expectations and facilitate successful submissions.

What is the difference between Remote Bug Bounty Program vs Remote Penetration Tester?

AspectRemote Bug Bounty ProgramRemote Penetration Tester
CredentialsTypically no formal certifications required, but cybersecurity knowledge helpsOften holds certifications like OSCP, CEH, or CISSP
Work EnvironmentParticipates remotely, often independently, on various platformsWorks remotely or on-site for clients, conducting security assessments
Employer & Industry UsageUsed by companies to crowdsource security testing; industry-wideEmployed by organizations or consulting firms to perform security audits

While both roles focus on cybersecurity, a Remote Bug Bounty Program involves independent testing on platforms to find vulnerabilities, whereas a Remote Penetration Tester conducts comprehensive security assessments for organizations, often with formal credentials and direct client engagement.

More about Remote Bug Bounty Program jobs

What cities are hiring for Remote Bug Bounty Program jobs?

Cities with the most Remote Bug Bounty Program job openings:

What are the most commonly searched types of Bug Bounty Program jobs?

The most popular types of Bug Bounty Program jobs are:

What states have the most Remote Bug Bounty Program jobs?

States with the most job openings for Remote Bug Bounty Program jobs include:

What job categories do people searching Remote Bug Bounty Program jobs look for?

The top searched job categories for Remote Bug Bounty Program jobs are:

Remote Bug Bounty Program jobs near you
Infographic showing various Remote Bug Bounty Program job openings in the United States as of September 2026, with employment types broken down into 1% Internship, 1% As Needed, 74% Full Time, 20% Part Time, and 4% Contract. Highlights an 94% Physical, 1% Hybrid, and 5% Remote job distribution, with an average salary of $103,178 per year, or $49.6 per hour.

Bug Bounty Security Researcher

On-site, Remote

Jobgether
See more jobs at Jobgetherexternal

Contractor

Posted 9 days ago

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Bug Bounty Security Researcher based in Netherlands.

This is an exciting security research opportunity for a skilled professional passionate about discovering vulnerabilities and strengthening real-world application security.
You will investigate software applications, systems, and networks to uncover security weaknesses before they can be exploited maliciously.
The role combines offensive security research, creative attack development, vulnerability exploitation, and detailed technical reporting.
You will work across web, mobile, and network security environments while participating in private and public bug bounty programs.
Your findings will directly contribute to improving security products and services and protecting customers against emerging threats.
The position offers flexibility to work independently, explore challenging targets, and be rewarded for high-impact vulnerabilities.
This opportunity is ideal for a curious and analytical security researcher who enjoys continuous learning and responsible vulnerability disclosure.

Accountabilities
  • Conduct thorough security research across target applications, systems, and networks to identify vulnerabilities and potential attack paths.
  • Develop and execute customized attack vectors using techniques such as fuzzing, SQL injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Remote Code Execution.
  • Safely validate and exploit discovered vulnerabilities while following responsible testing and disclosure practices.
  • Analyze application and infrastructure behavior to identify weaknesses that may not be apparent through standard automated testing.
  • Produce clear and comprehensive vulnerability reports containing technical descriptions, proof-of-concept code or evidence, severity information, and reproducible steps.
  • Participate in ongoing bug bounty programs and private security research engagements.
  • Share security findings and insights that can help improve products, services, and overall vulnerability management practices.
  • Continuously research new attack techniques, tools, vulnerabilities, and security trends to improve testing effectiveness.
  • Contribute to a collaborative security environment focused on identifying and responsibly addressing real-world threats.

Requirements

  • At least 1 year of professional or demonstrable experience in security research, penetration testing, vulnerability assessment, or a related field.
  • Strong understanding of computer systems, networks, web applications, and software security.
  • Practical knowledge of offensive security methodologies and vulnerability discovery techniques.
  • Experience with programming or scripting languages such as Python, C++, JavaScript, and HTML.
  • Familiarity with security tools including Burp Suite, OWASP ZAP, Nmap, and Kali Linux.
  • Experience participating in bug bounty programs and applying responsible disclosure practices.
  • Strong analytical, investigative, and problem-solving abilities.
  • Excellent technical communication and documentation skills, with the ability to clearly explain complex vulnerabilities.
  • Relevant application security certifications such as Burp Suite Certified Practitioner (BSCP), Offensive Security Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT), or Offensive Security Certified Professional (OSCP) are highly valued.
  • 3+ years of experience in security research, penetration testing, or vulnerability assessment is a strong advantage.
  • A recognized public bug bounty profile with awarded vulnerability reports is preferred.
  • Recognized contributions to Common Vulnerabilities and Exposures (CVEs) are a plus.
  • Strong sense of responsibility and commitment to ethical security research.

Benefits

  • Flexible freelance engagement allowing you to work according to your own schedule.
  • Bounty awards for valid and accepted vulnerability reports.
  • Weekly payments for valid reports following successful triage.
  • Recognition for high-quality submissions through leaderboards both on and outside the platform.
  • Opportunities to perform real-world penetration testing across web application, mobile, and network security.
  • Access to private and exclusive bug bounty programs.
  • Opportunity to work on diverse targets and investigate high-impact security vulnerabilities.
  • Collaborative, empathy-led security culture focused on improving internet security.
  • Continuous exposure to modern offensive security techniques, tools, and emerging vulnerabilities.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
 Why Apply Through Jobgether? 
 
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
 
 
#LI-CL1
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
apply for this job

Apply