Product Security Analyst
$120,000–$155,000 year
RemoteUnited States or Boston, Massachusetts, United States
Job Summary
Evaluate vulnerability reports from security researchers to determine validity, severity, and business impact using established frameworks like CVSS. Independently reproduce reported vulnerabilities across web and mobile applications to validate findings, identify root causes, and clearly communicate technical details. Collaborate directly with researchers to gather missing information, clarify technical specifics, and improve report quality while maintaining professional communication with customers. Create concise, accurate summaries for validated findings, including reproduction steps, impact analysis, and remediation guidance. Contribute to an AI-First approach by leveraging automation and AI-enabled workflows to improve operational efficiency and vulnerability triage quality. Proactively identify opportunities to improve internal processes, documentation, tooling, and triage workflows to enhance scalability. Note that some weekend shifts will be required.
Required Qualifications
- 3+ years of hands-on experience performing security testing, vulnerability research, or ethical hacking on web and mobile applications
- Strong technical understanding of common application security vulnerabilities, including the OWASP Top 10
- Experience using security testing tools such as Burp Suite
- Familiarity with vulnerability scoring frameworks including CVSS
- Excellent written and verbal communication skills in English, including the ability to communicate technical concepts clearly to both technical and non-technical audiences
- Ability and desire to work weekend shifts from time to time
- Note: some weekend shifts will be required
Desired Qualifications
- Experience participating in bug bounty or vulnerability disclosure programs
- Experience reproducing and validating vulnerabilities submitted by external researchers or customers
- Familiarity with scripting or automation used in security testing or operational workflows
- Demonstrated ability to manage competing priorities and maintain operational excellence in a fast-paced, globally distributed environment
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.