EMEA Security Analyst – Vulnerability & Bug Bounty Specialist

Methodfi; City of London; Hybrid; GBP 64,000 - 80,000; Full time

Job summary

A leading security firm in the United Kingdom is seeking a Security Analyst to evaluate vulnerability reports and collaborate with security researchers. This role requires strong technical knowledge and excellent communication skills. The ideal candidate will have experience in vulnerability disclosure and Web App testing. A flexible work environment is offered, primarily remote with occasional in-person meetings.

Benefits

Health insurance

Equity stock options

Retirement plans

Unlimited PTO

Parental leave

Employee Assistance Program

Flexible Work Stipend

Qualifications

• Proven experience with vulnerability disclosure and bug bounty.
• 3 years experience in manual Web App testing.
• Strong technical knowledge of OWASP top 10.
• Comfortable using security testing tools like Burpsuite.
• Excellent written and verbal communication skills.
• Experience using frameworks such as CVSS.
• Self-motivated and able to manage time effectively.
• Fluency in English.

Responsibilities

• Evaluate assigned vulnerability reports submitted by hackers.
• Collaborate with hackers to address report information.
• Compose a technical summary for valid reports.
• Ensure clear communication between hackers and customers.
• Proactively identify and solve issues as a team.
• Work remotely with occasional in-person interactions.

Skills

Vulnerability disclosure

Manual Web App testing

OWASP top 10

Security testing tools

Communication skills

CVSS frameworks

Self-motivated

English fluency

Tools

Burpsuite

Job description

A leading security firm in the United Kingdom is seeking a Security Analyst to evaluate vulnerability reports and collaborate with security researchers. This role requires strong technical knowledge and excellent communication skills. The ideal candidate will have experience in vulnerability disclosure and Web App testing. A flexible work environment is offered, primarily remote with occasional in-person meetings.