Analista de Triaje de Bug Bounty

Excelia; United States; Remote; USD 90,000 - 140,000; Full time

Job summary

Excelia seeks a dedicated security liaison to manage the queue of reports from external researchers. You will reproduce issues, assign severity with evidence, and rewrite findings so engineers can act without further questions.

You will serve as the primary point of contact, explaining duplicates, scope, or non-vulnerabilities, and you will keep researchers informed with clear, fair, and timely communication.

Qualifications

• Strong web security fundamentals required.
• Fast, fair judgement on severity based on evidence.
• Clear, concise communication to prevent arguments.

Responsibilities

• Reproduce reports and settle severity with evidence.
• Rewrite findings so an engineer can act without asking questions.
• Keep researchers informed, including when the answer is no.

Skills

Strong web security fundamentals

CVSS fluency

Bug bounty experience

Job description

You handle the queue of reports submitted by external security researchers. For each one you attempt to reproduce the issue, assign a severity based on the demonstrated impact, and rewrite it so that an engineer can act on it without further questions. You are also the point of contact for the researcher, which includes explaining clearly when a report is a duplicate, out of scope, or not a vulnerability.

What you will do:

• Reproduce reports and settle severity with evidence
• Rewrite findings so an engineer can act without asking questions
• Keep researchers informed, including when the answer is no

What they ask for:

• Strong web security fundamentals
• Fast, fair judgement on severity
• Writes well enough to defuse an argument

Nice to have:

• Bug bounty experience from the researcher side
• CVSS fluency