Emerging Cybersecurity Engineer — Bug Bounty & Red Team

Merkl; Paris; Hybrid; EUR 42,000 - 62,000; Full time

Benefits offered by this job

Equipment stipend

Team retreats

Competitive salary

Job summary

Merkl is hiring a Junior Cybersecurity Engineer to help build the next phase of our security program. You will work across teams to protect onchain infrastructure, own the bug bounty program, and participate in internal red-team exercises to raise the security bar.

You will learn from senior engineers and play a critical role in vulnerability management, audits, and security across our product and cloud infrastructure.

Qualifications

• First experience in cybersecurity or related hands-on projects (CTFs, home labs, personal projects).
• Knowledge of web application security fundamentals (OWASP Top 10) and practice with vulnerability assessment tooling.
• Interest in bug bounty programs and security audits; eagerness to learn and own tasks end-to-end.
• Good fundamentals in Linux, networking, and cloud environments; knowledge of Kubernetes is a plus.

Responsibilities

• Own the bug bounty program: triage submissions, assess impact, coordinate fixes with engineers.
• Run internal red-team exercises to test processes and security controls.
• Share findings and drive learning through post-mortems and awareness sessions.
• Maintain evidence for vulnerability management and audits; work with auditors to demonstrate security posture.
• Help build and maintain the vulnerability management process from detection to remediation.

Skills

Bug bounty mindset

Vulnerability management

Security audits

Cloud security

Linux basics

OWASP Top 10 familiarity

Security tooling

Tools

Burp Suite

Kubernetes

GCP

TypeScript

Golang

Solidity

Job description

Merkl is hiring a Junior Cybersecurity Engineer to help build the next phase of our security program. You will work across teams to protect onchain infrastructure, own the bug bounty program, and participate in internal red-team exercises to raise the security bar.

You will learn from senior engineers and play a critical role in vulnerability management, audits, and security across our product and cloud infrastructure.