Bug Bounty Program Lead

tsys; Leicester; On-site; GBP 60,000 - 80,000; Full time

Job summary

Global Payments is seeking an experienced Bug Bounty Analyst to join our Security Operations team. You will manage assessment, coordination and remediation of findings from our Bug Bounty Program, supporting triage and ensuring timely reporting to remediation owners while overseeing retests.

Work closely with business lines, security champions, and legal teams to mature the program, document risks, and keep runbooks up to date.

Qualifications

• Bachelor's degree in Computer Science, Info Security, or related field.
• Typically 2+ years of vulnerability management or bug bounty program experience.
• Knowledge of Unix/Linux/macOS/Windows and security operations, IDS, SIEM, pentesting, secure coding.

Responsibilities

• Assess vulnerabilities and assign severity per CVSS.
• Communicate findings to technical and non-technical stakeholders.
• Develop remediation strategies with timelines.
• Coordinate remediation with white-hat researchers.
• Analyze findings for visibility gaps and fix monitoring gaps.
• Identify missing security controls and ensure tracking to completion.
• Mature the program by onboarding new assets.
• Collaborate with Risk Management to document risks and issues.
• Maintain knowledge of PCI, HIPAA, GDPR, PII, NIST CSF.
• Work with Legal and Privacy Offices when data is at risk.
• Maintain runbooks for day-to-day activities.

Skills

Vulnerability management

Bug bounty

Communication skills

Stakeholder comms

Threat assessment

Education

Bachelor's degree in Computer Science or related

Tools

ServiceNow

JIRA

Vulnerability scanners

Job description

Global Payments is seeking an experienced Bug Bounty Analyst to join our Security Operations team. You will manage assessment, coordination and remediation of findings from our Bug Bounty Program, supporting triage and ensuring timely reporting to remediation owners while overseeing retests.

Work closely with business lines, security champions, and legal teams to mature the program, document risks, and keep runbooks up to date.