Associate Security Analyst

PM Consulting; United States; Remote; USD 70,000 - 120,000; Full time

Job summary

PM Consulting is seeking an Associate Security Analyst to join its vulnerability research and triage team. You will act as the primary contact for the global security researcher community, analyze findings to protect high-profile enterprise clients, and contribute to safer digital environments through expert analysis and reporting.

You will evaluate vulnerabilities end-to-end, reproduce findings, engage with researchers, and craft detailed reports tailored to each client's technical

Qualifications

• Technical writing skills to explain complex security concepts clearly.
• Experience in web application, network, and/or mobile security.
• Understanding of the OWASP Top 10 and standard security testing tools.
• Experience with programming or scripting languages.

Responsibilities

• Evaluate potential security vulnerabilities end-to-end.
• Reproduce findings reported by external researchers to validate impact.
• Engage with the global security research community to gather information.
• Draft comprehensive vulnerability reports tailored to client requirements.

Skills

Technical Communication

Security Expertise

OWASP Top 10

Scripting/Programming

Bug Bounty/Penetration Testing/QA

Job description

The Opportunity

A leading global information assurance organization is seeking a dedicated Associate Security Analyst to join its specialized vulnerability research and triage team. This role offers a unique opportunity to act as a primary point of contact for the global security researcher community, analyzing their findings to protect high-profile enterprise clients. The successful candidate will join a distributed global team and contribute to a mission of creating a safer digital environment through expert analysis and reporting.

The Challenge

In this role, you will be responsible for the end-to-end evaluation of potential security vulnerabilities. Your core objectives include:

• Vulnerability Analysis: Investigating and fully reproducing security findings reported by external researchers to validate their impact.
• Community Engagement: Communicating directly with the global security research community to gather additional information and relay technical analysis results.
• Technical Reporting: Drafting and delivering high-quality, comprehensive vulnerability reports tailored to the specific technical requirements of individual clients.
• Process Improvement: Actively contributing to projects aimed at enhancing internal security tools, operational workflows, and the overall quality of service delivery.

Essential Skills & Qualifications

• We are looking for candidates who possess a strong technical foundation and a passion for cybersecurity:
• Technical Communication: Strong technical writing skills with the ability to explain complex security concepts clearly.
• Security Expertise: Professional experience in web application, network, and/or mobile security.
• Core Knowledge: Thorough understanding of the OWASP Top 10 and familiarity with standard security testing tools.
• Technical Proficiency: Recent professional experience involving the regular use of a programming or scripting language.
• Advantageous Experience: Prior experience in Bug Bounty programs, Penetration Testing, or Software Quality Assurance (QA) is considered a significant plus.

Additional Information

Work Schedule: For training and alignment purposes, the first six months of this role will require a specialized working schedule to ensure overlap with regional leadership.

Background Checks: Due to the nature of our security work, successful candidates must be willing to undergo a standard pre-employment vetting process.