Security Analyst

Virtual Clone · India

Join our mission to make the digital world safer!

As a Bug Bounty–Focused Security Analyst , you’ll work closely with our global community of ethical hackers, helping identify, validate, and escalate real-world vulnerabilities — ensuring organizations stay ahead of evolving cyber threats.

Your Role

• Review, validate, and triage vulnerability reports submitted by bug bounty hunters.
• Assess the impact and severity of findings, including CVSS scoring.
• Collaborate directly with ethical hackers to reproduce and understand vulnerabilities.
• Provide clear, actionable remediation guidance to clients.
• Perform targeted penetration testing to support and verify bug bounty findings.
• Identify duplicate, false positive, and low-quality submissions efficiently.
• Contribute to improving bug bounty program quality and researcher engagement.
• Stay updated with the latest exploitation techniques, bug bounty trends, and attack vectors.

What You’ll Bring

• 1+ year of experience in Bug Bounty, VAPT, or Security Research .
• Active Bug Bounty profile (HackerOne, Bugcrowd, Synack, etc.).
• Strong hands-on experience in identifying real-world vulnerabilities.
• Solid understanding of OWASP Top 10 , web & API security.
• Ability to think like an attacker and validate complex vulnerability chains.
• Strong analytical, communication, and report-writing skills.
• Proficiency in Linux, Windows, and macOS environments .
• Fluent in English
• Passion for ethical hacking and continuous learning.

Nice to Have

• Recognized Bug Bounty achievements (Hall of Fame, bounties, rankings).
• Certifications like CEH, OSCP, OSWE, eWPT, CPT , etc.
• Experience with automation, scripting, or custom testing tools.

Job Details

• Work Time: 11:30 AM to 8:30 PM
• Location: Mumbai
• Mode: Work From Office