Freelance Bug Bounty Researcher: Web & App Security

Jobgether SRL; México; Remote; MXN 500,000 - 900,000; Full time

Benefits offered by this job

Flexible freelance engagement

Remote work opportunities

Private bug bounty access

Job summary

Jobgether SRL is seeking a Bug Bounty Security Researcher based in Mexico to explore applications, networks, and systems, uncover vulnerabilities, and contribute to responsible disclosure.

You will work across web, mobile, and network security environments, participate in private bug bounty programs, and report findings with PoCs, severity, and reproducible steps. This freelance role offers flexibility and impact.

Qualifications

• At least 1 year of professional or demonstrable experience in security research or related field.
• Strong understanding of computer systems, networks, and web applications.
• Familiarity with offensive security methodologies and vulnerability discovery techniques.
• Experience with bug bounty programs and responsible disclosure practices.
• Excellent technical communication and documentation skills.
• 3+ years of experience is a strong advantage.
• Public CVE contributions are a plus.

Responsibilities

• Conduct security research across targets to identify vulnerabilities and attack paths.
• Develop and test attack vectors using fuzzing, SQLi, XSS, SSRF, and RCE.
• Safely validate and report vulnerabilities with PoCs and clear steps.
• Analyze behavior to find weaknesses not visible to automated testing.
• Produce comprehensive vulnerability reports with severity and evidence.
• Participate in ongoing bug bounty programs and engagements.
• Share findings to improve products and vulnerability management.

Skills

Analytical thinking

Problem solving

Technical writing

Ethical security

Education

BS in Computer Science

Tools

Burp Suite

OWASP ZAP

Nmap

Kali Linux

Job description

Jobgether SRL is seeking a Bug Bounty Security Researcher based in Mexico to explore applications, networks, and systems, uncover vulnerabilities, and contribute to responsible disclosure.

You will work across web, mobile, and network security environments, participate in private bug bounty programs, and report findings with PoCs, severity, and reproducible steps. This freelance role offers flexibility and impact.