ZipRecruiter

Log In

2

Remote Bug Bounty Program Jobs in Ohio (NOW HIRING)

Nestle

Supply Chain Operations Lead

Solon, OH · On-site +1

Our broad product portfolio includes renowned brands like Garden of Life, Nature's Bounty, Vital ... This position will be either a remote or hybrid role based on the selected candidate's geographic ...

Lower LLC

SDET/Automation QA Engineer

Columbus, OH · On-site +1

$125K - $145K/yr

... program. Location: This role is ideally hybrid and based out of one of our corporate office ... Strong remote candidates may be considered if a suitable local skill match is not identified.

Transworld Systems Inc.

Artiva Developer

Columbus, OH · On-site +1

$75K - $95K/yr

Remote Compensation : $75,000 - $95,000 DOE (exempt/annual salary) For over 50 years, Transworld ... Monitors and manages requests for application enhancements, bug fixes, and new features. Provides ...

All JobsBug Bounty Program JobsRemote Bug Bounty Program JobsRemote Bug Bounty Program Jobs in Ohio

Remote Bug Bounty Program information

What are Remote Bug Bounty Programs?

Remote Bug Bounty Programs are initiatives run by organizations that invite independent security researchers, or 'bug hunters,' to find and report vulnerabilities in their software or systems. These programs are conducted entirely online, allowing participants from around the world to contribute remotely. Companies offer monetary rewards or other incentives for valid and impactful security findings. This approach helps organizations strengthen their security by leveraging a global pool of ethical hackers, while participants gain recognition and compensation for their expertise.

What are the biggest challenges faced by participants in a remote bug bounty program, and how can they be addressed?

One of the main challenges in remote bug bounty programs is staying motivated and disciplined without direct oversight, as participants often work independently. Additionally, understanding the specific security requirements and scope of each program can be complex, especially when dealing with varied platforms and reporting standards. To overcome these challenges, it's important to set personal goals, join online communities for peer support, and thoroughly review each program's documentation before starting. Effective communication with program coordinators can also help clarify expectations and facilitate successful submissions.

What is the difference between Remote Bug Bounty Program vs Remote Penetration Tester?

AspectRemote Bug Bounty ProgramRemote Penetration Tester
CredentialsTypically no formal certifications required, but cybersecurity knowledge helpsOften holds certifications like OSCP, CEH, or CISSP
Work EnvironmentParticipates remotely, often independently, on various platformsWorks remotely or on-site for clients, conducting security assessments
Employer & Industry UsageUsed by companies to crowdsource security testing; industry-wideEmployed by organizations or consulting firms to perform security audits

While both roles focus on cybersecurity, a Remote Bug Bounty Program involves independent testing on platforms to find vulnerabilities, whereas a Remote Penetration Tester conducts comprehensive security assessments for organizations, often with formal credentials and direct client engagement.

What are the key skills and qualifications needed to thrive in a Remote Bug Bounty Program role, and why are they important?

To thrive in a Remote Bug Bounty Program role, you need a strong background in cybersecurity, vulnerability assessment, and ethical hacking, often supported by experience in penetration testing and security certifications like OSCP or CEH. Familiarity with tools such as Burp Suite, Nmap, Metasploit, and various bug bounty platforms is essential. Attention to detail, persistence, effective communication, and self-motivation are standout soft skills for this position. These abilities are crucial for identifying and responsibly reporting security vulnerabilities that help organizations strengthen their defenses.
What are the most commonly searched types of Bug Bounty Program jobs in Ohio? The most popular types of Bug Bounty Program jobs in Ohio are:
What are popular job titles related to Remote Bug Bounty Program jobs in Ohio? For Remote Bug Bounty Program jobs in Ohio, the most frequently searched job titles are:
What job categories do people searching Remote Bug Bounty Program jobs in Ohio look for? The top searched job categories for Remote Bug Bounty Program jobs in Ohio are:
What cities in Ohio are hiring for Remote Bug Bounty Program jobs? Cities in Ohio with the most Remote Bug Bounty Program job openings:
Remote Bug Bounty Program jobs near you
Application Security & Remediation Engineer

Application Security & Remediation Engineer

Aquent

Canton, OH • On-site, Remote

$90 - $92/hr

Temporary

Posted 14 days ago

Job description

Placement Type:
Temporary
Salary:
$90-92 Hourly
$92 / hourly as W2
Start Date:
Aug 3, 2026
Application Security & Remediation Engineer
Remote
$92 / hourly
As an Application Security & Remediation Engineer on our Attack & Pentest team, you will bridge the gap between offensive security discovery and defensive engineering. You won't just find vulnerabilities; you will own the critical process of validating exploitability, calculating real-world business risk, and collaborating directly with engineering teams to ensure effective remediation.
This is a highly technical, hands-on role perfect for an offensive security professional who wants to maximize their impact by ensuring vulnerabilities are not just documented, but permanently resolved.
Core Responsibilities
  • Advanced Triage & Exploitation: Review, validate, and replicate incoming vulnerability reports (including internal testing, automated tooling, and crowdsourced programs). Assess severity and business impact, and build clear proof-of-concept (PoC) reproductions.
  • Remediation Consultation: Partner closely with application security, DevOps, and engineering teams to provide clear, actionable remediation guidance and architectural context.
  • Targeted Retesting: Perform manual and automated validation testing of remediated applications and infrastructure to verify that code fixes are robust and complete.
  • Vulnerability Orchestration: Monitor remediation timelines against organizational SLAs, coordinate with development squads to unblock complex fixes, and escalate systemic risks when necessary.
  • Data & Metrics: Maintain high-fidelity records within our vulnerability management ecosystem and contribute to executive-level metrics regarding corporate risk posture.
  • Strategic Process Improvement: Identify patterns in recurring vulnerabilities to recommend systemic guardrails, CI/CD tooling enhancements, or developer training initiatives to eliminate bug classes at the source.
Required Qualifications
  • Experience: 3+ years of hands-on experience in offensive security, penetration testing, or technical application security engineering (web apps, APIs, cloud-native infrastructure).
  • Triage Mastery: Proven experience analyzing and prioritizing vulnerabilities at scale using framework methodologies (CVSS, CWE, OWASP Top 10).
  • Technical Communication: Exceptional ability to write reproducible PoCs and translate complex cryptographic, logic, or code flaws into clear remediation steps for developers.
  • Ecosystem Knowledge: Deep understanding of modern SDLC practices, Git-based workflows, and how security testing integrates into the development lifecycle.
  • Tools: Proficient with core offensive testing tooling (e.g., Burp Suite Pro, Caido, Nuclei) and familiarity with ticketing/vulnerability management platforms (e.g., Jira, DefectDojo).
Preferred Qualifications
  • Certifications: OSCP, GWAPT, GPEN, BSCP, or equivalent practical offensive security certifications.
  • Automation: Scripting capabilities (Python, Bash, Go) to automate routine validation and retesting workflows.
  • Cloud & Modern Infrastructure: Foundational security knowledge of cloud environments (AWS/Azure/GCP) and containerized environments (Kubernetes/Docker).
  • Industry Experience: Familiarity with securing highly regulated environments (e.g., financial services, healthcare) and handling bug bounty programs

Apply