Bug Bounty & Vulnerability Analyst

Global Payments Inc.; Dublin; On-site; EUR 70,000 - 95,000; Full time

Job summary

Global Payments Inc. in Ireland seeks a Vulnerability Management professional to assess CVSS severity, coordinate remediation with Bug Bounty programs, and communicate findings to both technical and non-technical audiences.

You will develop mitigation plans, work with Risk Management and Legal teams to protect data, and ensure timely remediation across assets while aligning with PCI, GDPR, and NIST CSF guidelines.

Qualifications

• Bachelor's degree in Computer Science, Information Security or related field, or equivalent work experience.
• Minimum 2 years in vulnerability management or Bug Bounty program handling.
• Knowledge of network operations, Unix/Linux/Windows, security tooling and incident response.

Responsibilities

• Assess and support CVSS severity assignments on reported vulnerabilities.
• Communicate vulnerability findings to technical and non-technical stakeholders.
• Develop mitigation plans and timelines for identified vulnerabilities.
• Coordinate remediation across Bug Bounty and Vulnerability Disclosure Programs.
• Analyze findings and address visibility gaps with scanners and controls.
• Identify missing security controls and ensure remediation is tracked to completion.
• Mature the program through onboarding of new assets and teams.
• Collaborate with Risk Management to document risks and issues from Bug Bounty findings.
• Maintain knowledge of PCI, GDPR, NIST CSF, PII and related data security frameworks.

Skills

Vulnerability Management

Stakeholder Communication

Security Operations

Education

Bachelor's degree in Computer Science or Info Security

Tools

ServiceNow

JIRA

Job description

Global Payments Inc. in Ireland seeks a Vulnerability Management professional to assess CVSS severity, coordinate remediation with Bug Bounty programs, and communicate findings to both technical and non-technical audiences.

You will develop mitigation plans, work with Risk Management and Legal teams to protect data, and ensure timely remediation across assets while aligning with PCI, GDPR, and NIST CSF guidelines.