Remote Security Analyst: Master Web App Vulnerabilities

RunSybil Inc.; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Equity

Ownership in product

Job summary

RunSybil Inc. is seeking a Security Analyst to join its security research team.

You will work hands-on with web vulnerabilities, assessing findings, confirming exploitability, rating severity, and delivering clear, accurate reports that customers rely on to understand and remediate their risk. This role does not require software engineering experience but demands deep familiarity with web vulnerabilities, sharp analytical judgment, and precise communication.

Qualifications

• 2+ years hands-on experience with web vulnerabilities (bug bounty, pentesting, app security)
• Solid understanding of OWASP Top 10 and common web vulnerability classes
• Experience reproducing and validating findings manually in varied environments

Responsibilities

• Assess and validate web vulnerabilities across targets, confirm exploitability and scope
• Reproduce findings hands-on using Burp Suite and tools
• Rate severity using CVSS/OWASP frameworks
• Write clear, customer-facing finding descriptions and remediation guidance
• Maintain standards across a high volume of findings
• Surface patterns and share feedback to improve Sybil

Skills

Web vulnerabilities

Bug bounty

Penetration testing

OWASP Top 10

Burp Suite

Developer tools

Written communication

Attention to detail

Self-direction

Tools

Burp Suite

Browser Dev Tools

Job description

RunSybil Inc. is seeking a Security Analyst to join its security research team.

You will work hands-on with web vulnerabilities, assessing findings, confirming exploitability, rating severity, and delivering clear, accurate reports that customers rely on to understand and remediate their risk. This role does not require software engineering experience but demands deep familiarity with web vulnerabilities, sharp analytical judgment, and precise communication.