Bug Bounty Program Specialist

Global Payments; Leicester; On-site; GBP 50,000 - 70,000; Full time

Job summary

Global Payments seeks an experienced Bug Bounty Analyst to join its Security Operations team to manage and drive the Bug Bounty Program. You will coordinate triage, remediation, and retesting of findings reported by researchers, and work with multiple business lines to mature the program and secure assets.

The role emphasizes collaboration with risk, legal, and privacy teams, ensuring timely remediation and clear communication with stakeholders across technical and non-technical audiences.

Qualifications

• Bachelor's degree in Computer Science, Info Security, or related field, or relevant work experience.
• Minimum 2 years relevant experience with vulnerability management or in Bug Bounty program handling.
• Knowledge of network operations or engineering on Unix/Linux/Mac/Windows; familiar with security operations and SIEM.
• Experience with vulnerability scanners, remediation coordination, and incident response.

Responsibilities

• Assess and support severity assignment on reported vulnerabilities/bugs per CVSS.
• Communicate findings to stakeholders, technical and non-technical.
• Coordinate remediation with white-hat researchers and remediation owners; retest.
• Suggest mitigation plans and timelines; track progress to completion.
• Collaborate with Risk Management and Legal/Privacy when data risk arises.

Skills

Vulnerability Management

Communication skills

Attention to detail

Security knowledge

Education

Bachelor's degree in Computer Science or Info Security

Tools

ServiceNow

JIRA

Job description

Global Payments seeks an experienced Bug Bounty Analyst to join its Security Operations team to manage and drive the Bug Bounty Program. You will coordinate triage, remediation, and retesting of findings reported by researchers, and work with multiple business lines to mature the program and secure assets.

The role emphasizes collaboration with risk, legal, and privacy teams, ensuring timely remediation and clear communication with stakeholders across technical and non-technical audiences.