Bug Bounty Security Researcher

Inspectiv; United States; Remote; USD 90,000 - 150,000; Full time

Benefits offered by this job

Bounty awards for vulnerabilities

Leaderboard recognition

Real-world penetration testing

Private bug bounty programs

Job summary

Inspectiv seeks a skilled security researcher/penetration tester to join our vulnerability-focused team. You will conduct target research, craft attack vectors, document findings, and contribute to Bug Bounty as a Service programs across Web, Mobile, and Network security.

Ideal candidates have 1+ year in security research or pentesting, strong systems knowledge, and hands-on experience with Python, C++, JavaScript, HTML, and tools like Burp Suite, OWASP ZAP, Nmap, or Kali Linux.

Qualifications

• 1 year of experience in security research, penetration testing, or vulnerability assessment.
• Strong understanding of computer systems, networks, and software applications.
• Proficiency with programming languages such as Python, C++, JavaScript, or HTML.
• Experience with offensive security tools like Burp Suite, OWASP ZAP, Nmap, or Kali Linux.
• Experience with bug bounty programs and responsible disclosure practices.
• Excellent analytical, problem-solving, and documentation skills.

Responsibilities

• Conduct thorough research on target systems, applications, and networks to identify potential vulnerabilities
• Develop and execute custom attack vectors using tools like fuzzing, SQL injection, XSS, SSRF, and RCE
• Identify and exploit vulnerabilities in a responsible manner without causing harm to systems or data
• Document all findings including detailed descriptions, proof-of-concept code, and reproduction steps
• Participate in regular bug bounty programs and contribute to product improvement

Skills

Python

C++

JavaScript

HTML

Tools

Burp Suite

OWASP ZAP

Nmap

Kali Linux

Job description

About the Company

At Inspectiv, we are dedicated to revolutionizing the landscape of vulnerability management with a unified platform for Bug Bounty as a Service and Pentesting as a Service. We are a well-funded Series A company with top tier investors.

Responsibilities

• Conduct thorough research on target systems, applications, and networks to identify potential vulnerabilities
• Develop and execute custom attack vectors using tools like fuzzing, SQL injection, XSS, SSRF, and RCE
• Identify and exploit vulnerabilities in a responsible manner without causing harm to systems or data
• Document all findings including detailed descriptions, proof-of-concept code, and reproduction steps
• Participate in regular bug bounty programs and contribute to product improvement

Requirements

• 1 year of experience in security research, penetration testing, or vulnerability assessment
• Strong understanding of computer systems, networks, and software applications
• Proficiency with programming languages such as Python, C++, JavaScript, or HTML
• Experience with offensive security tools like Burp Suite, OWASP ZAP, Nmap, or Kali Linux
• Experience with bug bounty programs and responsible disclosure practices
• Excellent analytical, problem-solving, and documentation skills

Preferred Qualifications

• Relevant certifications such as BSCP, OSWE, GWAPT, or OSCP
• 3+ years of experience in security research or penetration testing
• An awarded and recognized public Bug Bounty profile
• Recognized contributions to Common Vulnerabilities and Exposures (CVEs)

Benefits

• Bounty awards for accepted vulnerabilities
• Recognition on various leaderboards
• Experience in real-world penetration testing across Web, Mobile, and Network Security
• Access to private, exclusive bug bounty programs