Intermediate Security Analyst, Vulnerability Operations (North America)

📋 Description

• Triage incoming bug bounty reports, including reviewing report quality, validating findings
• Triage vulnerabilities identified through vulnerability management activities and help track them
• Work with PSIRT engineers and development teams to gather technical details, reproduce issues, and
• Support severity assessment using frameworks and terminology such as CVE, CVSS, CWE, and OWASP.
• Communicate professionally and respectfully with security researchers participating in coordinated
• Support GitLab’s role as a CVE Numbering Authority by preparing information for CVE assignment

🎯 Requirements

• Early-career experience or equivalent education in cybersecurity, software engineering, information
• Foundational understanding of software vulnerabilities and security concepts, including web
• Familiarity with security terminology such as CVE, CVSS, CWE, OWASP Top 10, and coordinated
• Strong attention to detail and the ability to organize and prioritize multiple reports or work
• Clear written and verbal communication skills, with the ability to explain technical topics to both
• Experience with a bug bounty or vulnerability disclosure platform such as HackerOne or Bugcrowd.

🎁 Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave