Bug Bounty Security Analyst - Triage, Validate, Impact

Shopify; Canada; On-site; CAD 70,000 - 90,000; Full time

Job summary

A leading e-commerce platform in Canada is seeking an experienced Security Analyst to join their security organization, focusing on bug bounty program operations. The ideal candidate should possess strong communication skills, a track record of high-quality problem solving, and the ability to operate in dynamic environments. Responsibilities include triaging vulnerabilities, maintaining documentation, and mentoring team members. This role requires a great sense of accountability and a data-informed mindset to enhance security measures.

Qualifications

• Strong written communication skills.
• A track record of fast, high-quality problem solving.
• Comfort operating in externally-facing workflows.
• Operational discipline and documentation skills.
• High attention to detail in notes and decision rationale.
• A data-informed mindset to improve program health.
• Mentor teammates and develop deep expertise.
• Strong sense of accountability.

Responsibilities

• Triage bug bounty reports with quality and timeliness.
• Reproduce and validate reported security issues.
• Write clear communication to external researchers.
• Maintain internal documentation for efficient issue resolution.
• Quantify performance and program health using data.
• Partner with AppSec engineering when needed.

Skills

Written communication skills

Problem solving

Operational discipline

Attention to detail

Data-informed mindset

Mentorship

Accountability

Job description

A leading e-commerce platform in Canada is seeking an experienced Security Analyst to join their security organization, focusing on bug bounty program operations. The ideal candidate should possess strong communication skills, a track record of high-quality problem solving, and the ability to operate in dynamic environments. Responsibilities include triaging vulnerabilities, maintaining documentation, and mentoring team members. This role requires a great sense of accountability and a data-informed mindset to enhance security measures.