Remote Bug Bounty Security Researcher — Vulnerability Hunter

Inspectiv; Poland; Remote; PLN 120,000 - 180,000; Part time

Job summary

Inspectiv is seeking a remote, freelance Bug Bounty Security Researcher to join our team. You will identify vulnerabilities in software applications, systems, and networks, and report them with PoCs and reproduction steps.

Ideal candidates have at least 1 year of security research or pentesting experience, familiarity with tools like Burp Suite, ZAP, Nmap, and Kali Linux, and a track record in bug bounty programs and responsible disclosure.

Qualifications

• 1 year of security research, penetration testing, or vulnerability assessment.
• Strong understanding of computer systems, networks, and software applications.
• Some proficiency with programming languages (e.g., Python, C++, JavaScript, HTML) and offensive security tools (e.g., Burp Suite, OWASP ZAP, Nmap, Kali Linux).
• Experience with bug bounty programs and responsible disclosure practices.
• Excellent analytical and problem-solving skills.
• Strong communication and documentation skills.

Responsibilities

• Conduct thorough research on target systems, applications, and networks to identify potential vulnerabilities.
• Develop and execute custom attack vectors using various tools and techniques (e.g., fuzzing, SQL injection, XSS, SSRF, RCE).
• Identify and exploit vulnerabilities in a responsible manner, ensuring that no harm is caused to the system or data being tested.
• Document all findings, including detailed descriptions of discovered vulnerabilities, PoC code, and steps taken to reproduce the issue.
• Participate in regular bug bounty programs and contribute to the improvement of our products and services.

Skills

Security research

Penetration testing

Programming basics

Bug bounty programs

Documentation

Tools

Burp Suite

OWASP ZAP

Nmap

Kali Linux

Python

JavaScript

Job description

Inspectiv is seeking a remote, freelance Bug Bounty Security Researcher to join our team. You will identify vulnerabilities in software applications, systems, and networks, and report them with PoCs and reproduction steps.

Ideal candidates have at least 1 year of security research or pentesting experience, familiarity with tools like Burp Suite, ZAP, Nmap, and Kali Linux, and a track record in bug bounty programs and responsible disclosure.