Logo for ICONMA

Cyber Security Analyst – Vulnerability / Bug Bounty

ICONMA

Role overview

Qualifications

  • Hands-on experience validating and reproducing web application, API, and/or cloud security vulnerabilities.
  • Strong understanding of common vulnerability classes including OWASP Top 10 and authorization/access-control issues.
  • Practical experience with HTTP, REST APIs, authentication/authorization mechanisms, and web application architecture.
  • Direct experience with HackerOne or another vulnerability disclosure/bug bounty platform.

Responsibilities

  • Review and triage incoming bug bounty submissions for validity, severity, impact, and duplication.
  • Reproduce reported vulnerabilities and document clear technical evidence and reproduction steps.
  • Work with application/product teams to validate findings and support remediation.
  • Evaluate vulnerability severity using CVSS, exploitability, business impact, and environmental context.

Key facts

Hard skills

Other skills

  • Communication
  • Analytical Thinking
  • Problem Solving

About the company

ICONMA logo

ICONMA

Management Consulting

We provide Professional Staffing Services & Project-Based Solutions for a broad range of Fortune 500 organizations. ICONMA is a certified Woman-Owned staffing company and was founded in 2000. ICONMA’s corporate headquarters is in Troy, Michigan, and has 15+ locations worldwide. What makes ICONMA stand out in a fiercely competitive industry? *We provide integrated, full lifecycle services across a broad range of business and technical platforms. *No single company can duplicate our full range of staffing and permanent recruiting services nationwide. *Proven track record of attracting and retaining exceedingly skilled professional workers in a highly competitive market. SERVICES OFFERED Staff Augmentation (Contract, Contract to Hire, Direct Hire, Single Source) Data Analysis Project-Based Services & Solutions Hire Train Deploy Service Model Offshore Staff Augmentation Payroll Services AREAS OF EXPERTISE - Information Technology - Engineering - Business Professional - Accounting/Finance - Admin/Clerical/Call Center - Healthcare/Clinical/Scientific - Marketing/Creative mail linkedin@iconma.com Phone (888) 451-2519 Website http://www.iconma.com

Company details

Company typeLarge
IndustryManagement Consulting
Company size1001 - 5000

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Our client, a Commercial Banking company, is looking for a Cyber Security Analyst – Vulnerability / Bug Bounty for their Remote location.
 
Responsibilities:
  • Review and triage incoming bug bounty submissions for validity, severity, impact, and duplication.
  • Reproduce reported vulnerabilities and document clear technical evidence and reproduction steps.
  • Work with application/product teams to validate findings and support remediation.
  • Evaluate vulnerability severity using CVSS, exploitability, business impact, and environmental context.
  • Manage submissions through the vulnerability lifecycle, including researcher questions, internal escalation, remediation tracking, retesting, and closure.
  • Identify recurring vulnerability patterns and opportunities to improve detection or preventative controls.
  • Assist with bug bounty scope reviews, asset onboarding, exclusions, and program documentation.
  • Support reporting and metrics around submission volume, severity, remediation status, and vulnerability trends.
  • Partner with security engineering teams to translate researcher techniques and findings into actionable security improvements.
 
Requirements:
  • Hands-on experience validating and reproducing web application, API, and/or cloud security vulnerabilities.
  • Strong understanding of common vulnerability classes including OWASP Top 10 and authorization/access-control issues.
  • Practical experience with HTTP, REST APIs, authentication/authorization mechanisms, and web application architecture.
  • Experience using security testing tools such as Burp Suite, browser developer tools, API clients, and scripting tools.
  • Ability to independently analyze vulnerability reports and distinguish valid security issues from duplicates, informational findings, or non-security behavior.
  • Strong technical documentation skills, including the ability to clearly communicate reproduction steps, impact, and remediation guidance.
  • Experience working with engineering/application teams through vulnerability remediation and retesting.
  • Ability to manage multiple vulnerability investigations simultaneously with limited supervision."
  • Direct experience with HackerOne or another vulnerability disclosure/bug bounty platform.
  • Previous participation as a bug bounty researcher or vulnerability researcher.
  • Experience testing APIs, mobile applications, authentication systems, or complex authorization models.
  • Experience with cloud security, particularly AWS or Azure.
  • Familiarity with source-code review and secure coding practices.
  • Experience developing scripts or tooling in Python, PowerShell, JavaScript, or similar languages to assist vulnerability validation.
  • Familiarity with attack-surface management, asset discovery, threat hunting, or security detection engineering.
  • Security certifications such as OSCP, OSWE, BSCP, GWAPT, GPEN, or comparable hands-on experience."
 
Why Should You Apply?

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Cybersecurity Analyst Related jobs

United StatesCybersecurity Analyst

Other jobs at ICONMA

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.