Information Security Analyst: Senior- Penetration Tester

Summary: We are seeking an experienced Penetration Tester to support the automation and scaling of our Bug Bounty program. The selected candidate will be responsible for validating and triaging findings, ingesting confirmed issues into our enterprise ticketing system, and helping to establish processes that enable AI-driven validation and prioritization of findings.

Responsibilities:

Conduct web application and infrastructure penetration testing.

Validate and reproduce bug bounty submissions, identifying false positives and duplicate findings.

Triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies.

Partner with developers to remediate vulnerabilities and provide secure coding guidance.

Ingest confirmed issues into our enterprise ticketing system.

Establish processes for AI-driven validation and prioritization of findings.

Leverage scripting, automation, APIs, or AI-assisted workflows for process efficiency.

Required Qualifications:

Web application and infrastructure penetration testing experience.

Experience triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies.

Experience partnering with developers to remediate vulnerabilities and provide secure coding guidance.

Experience validating and reproducing bug bounty submissions, including identifying false positives and duplicate findings.

Familiarity with vulnerability management and ticketing platforms (ServiceNow, Jira, Azure DevOps, or similar).

Experience leveraging scripting, automation, APIs, or AI-assisted workflows (Python, PowerShell, LLM-based tooling, etc.).

Certifications such as GPEN, OSCP, PenTest+, or equivalent industry-recognized credentials.