Join our mission to make the digital world safer

As a Bug Bounty-Focused Security Analyst, you’ll work closely with our global community of ethical hackers, helping identify, validate, and escalate real-world vulnerabilities — ensuring organizations stay ahead of evolving cyber threats.

Your Role
- Review, validate, and triage vulnerability reports submitted by bug bounty hunters.
- Assess the impact and severity of findings, including CVSS scoring.
- Collaborate directly with ethical hackers to reproduce and understand vulnerabilities.
- Provide clear, actionable remediation guidance to clients.
- Perform targeted penetration testing to support and verify bug bounty findings.
- Identify duplicate, false positive, and low-quality submissions efficiently.
- Contribute to improving bug bounty program quality and researcher engagement.
- Stay updated with the latest exploitation techniques, bug bounty trends, and attack vectors.

What You’ll Bring
- 1+ year of experience in Bug Bounty, VAPT, or Security Research.
- Active Bug Bounty profile (HackerOne,



Bugcrowd, Synack, etc.).
- Strong hands-on experience in identifying real-world vulnerabilities.
- Solid understanding of OWASP Top 10, web & API security.
- Ability to think like an attacker and validate complex vulnerability chains.
- Robust analytical, communication, and report-writing skills.
- Proficiency in Linux, Windows, and macOS environments.
- Fluent in English
- Passion for ethical hacking and continuous learning.

Nice to Have
- Recognized Bug Bounty achievements (Hall of Fame, bounties, rankings).
- Certifications like CEH, OSCP, OSWE, eWPT, CPT, etc.
- Experience with automation, scripting, or custom testing tools.

Experience:
- Vulnerability assessment: 1 year (preferred)
- Security research: 1 year (preferred)
- Pen testing: 1 year (preferred)
- Bug Bounty: 1 year (preferred)

Location:
- Mumbai, Maharashtra (preferred)

Work Location: In person

📌 Security Analyst (Mumbai)
🏢 Virtual Clone
📍 Mumbai