Bug Bounty Security Analyst: Triaging & Remediation

Mindlance; Atlanta (GA); On-site; USD 90,000 - 150,000; Full time

Job summary

Mindlance seeks a Security Analyst in Atlanta to review and triage bug bounty submissions, reproduce vulnerabilities, and collaborate with engineering teams to validate findings and remediation.

The role emphasizes applying CVSS, understanding OWASP Top 10, documenting steps, and supporting reporting on vulnerability trends. Ideal candidates have hands-on testing experience and strong technical writing skills, with the ability to manage multiple investigations with limited supervision.

Qualifications

• Validate and reproduce web app, API, and cloud security vulnerabilities.
• Understand OWASP Top 10 and authorization/access-control issues.
• Work with API/authentication mechanisms and web app architecture.
• Use Burp Suite, browser tools, API clients, and scripting tools.
• Analyze vulnerability reports and distinguish valid issues from duplicates.
• Document reproduction steps, impact, and remediation guidance.
• Coordinate with engineering teams for remediation and retesting.
• Manage multiple investigations with limited supervision.

Responsibilities

• Review and triage incoming bug bounty submissions for validity, severity, impact, and duplication.
• Reproduce reported vulnerabilities and document clear technical evidence and reproduction steps.
• Work with application/product teams to validate findings and support remediation.
• Evaluate vulnerability severity using CVSS, exploitability, business impact, and environmental context.
• Manage submissions through the vulnerability lifecycle, including researcher questions, internal escalation, remediation tracking, retesting, and closure.
• Identify recurring vulnerability patterns and opportunities to improve detection or preventative controls.
• Assist with bug bounty scope reviews, asset onboarding, exclusions, and program documentation.
• Support reporting and metrics around submission volume, severity, remediation status, and vulnerability trends.
• Partner with security engineering teams to translate researcher techniques and findings into actionable security improvements.

Skills

Bug bounty triage

Vulnerability validation

OWASP Top 10

Web/API security concepts

Documentation and reporting

Cross-team collaboration

Multitask management

Education

Bachelor’s degree preferred

Tools

Burp Suite

Browser developer tools

API clients

Scripting basics (Python/PowerShell/JS)

Job description

Mindlance seeks a Security Analyst in Atlanta to review and triage bug bounty submissions, reproduce vulnerabilities, and collaborate with engineering teams to validate findings and remediation.

The role emphasizes applying CVSS, understanding OWASP Top 10, documenting steps, and supporting reporting on vulnerability trends. Ideal candidates have hands-on testing experience and strong technical writing skills, with the ability to manage multiple investigations with limited supervision.