Logo for Mindlance

Cyber Security Analyst

Mindlance

Role overview

Qualifications

  • Bachelor Degree Preferred
  • Hands-on experience validating and reproducing web application security vulnerabilities
  • Strong understanding of vulnerability classes including OWASP Top 10
  • Strong technical documentation skills

Responsibilities

  • Review and triage incoming bug bounty submissions for validity, severity, impact, and duplication
  • Reproduce reported vulnerabilities and document clear technical evidence and reproduction steps
  • Work with application/product teams to validate findings and support remediation
  • Evaluate vulnerability severity using CVSS, exploitability, business impact, and environmental context

Key facts

Hard skills

About the company

Mindlance logo

Mindlance

Staffing & Recruiting

Founded in 1999, Mindlance is one of the largest diversity-owned staffing firms in the US and has been on SIA’s list of Fastest Growing US Staffing Firms for 10 years. Mindlance has also been recognized as one of the consistently best performing partners to industry-leading MSP programs including Allegis, Kelly, TAPFIN, PROUnlimited, Pontoon, GRI, WorkforceLogiq and Agile-1.What started with contingent staffing has developed to a comprehensive portfolio of workforce solutions. Along with industry specific, talent-centric staffing across a range of specializations- Technology, Engineering, Scientific, Clinical Research, Digital, Creative, Marketing, Profession, Mindlance provides Managed Recruitment services- RPO and Direct + Diverse Sourcing, and Pay+ Services- EoR/Payroll, IC Compliance and AoR.Mindlance is also generating alternative talent pipelines that prioritize diversity through three Diverse Talent Acceleration offerings: (1) RebootTalent, a diverse returning talent acceleration service (2) Mindlance Diversphere, a private diverse talent pool aggregated from a network of diversity partnerships and (3) Quintrix Solutions, an upskilling recruit-train-deploy service.With a year-over-year growth rate of 20% and an annual revenue of over $400 million and growing, the Mindlance story is one of calculable achievement, made meaningful by the commitment to grow a mindful way that creates balance in the work and societal ecosystem.Visit www.mindlance.com to learn more about us and our latest job openings.STAFFING INDUSTRY ANALYSTS RECOGNITIONS:Fastest Growing U.S. Staffing Firms (2022, 2021, 2019, 2018, 2017, 2016, 2015, 2014, 2013, 2012, 2011)Largest U.S. Staffing Firms (2022, 2021, 2020, 2019, 2018, 2017, 2016, 2015)Largest Diversity-Owned U.S. Staffing Firms (2022, 2021, 2020, 2019, 2018, 2017, 2016, 2015)Largest IT Staffing Firms (2022, 2021, 2020, 2019, 2018, 2017)Largest Clinical & Scientific Staffing Firms (2022, 2021, 2020, 2019, 2018, 2017)

Company details

Company typeLarge
IndustryStaffing & Recruiting
Company size1001 - 5000

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Description:
Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work)
  • Supplement remediation of Bug Bounty findings.

Bachelor Degree: (Required, Preferred or Not Required)
  • Preferred.

Role Responsibilities: (what they will be doing)
  • Review and triage incoming bug bounty submissions for validity, severity, impact, and duplication.
  • Reproduce reported vulnerabilities and document clear technical evidence and reproduction steps.
  • Work with application/product teams to validate findings and support remediation.
  • Evaluate vulnerability severity using CVSS, exploitability, business impact, and environmental context.
  • Manage submissions through the vulnerability lifecycle, including researcher questions, internal escalation, remediation tracking, retesting, and closure.
  • Identify recurring vulnerability patterns and opportunities to improve detection or preventative controls.
  • Assist with bug bounty scope reviews, asset onboarding, exclusions, and program documentation.
  • Support reporting and metrics around submission volume, severity, remediation status, and vulnerability trends.
  • Partner with security engineering teams to translate researcher techniques and findings into actionable security improvements.

Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)
  • Hands-on experience validating and reproducing web application, API, and/or cloud security vulnerabilities.
  • Strong understanding of common vulnerability classes including OWASP Top 10 and authorization/access-control issues.
  • Practical experience with HTTP, REST APIs, authentication/authorization mechanisms, and web application architecture.
  • Experience using security testing tools such as Burp Suite, browser developer tools, API clients, and scripting tools.
  • Ability to independently analyze vulnerability reports and distinguish valid security issues from duplicates, informational findings, or non-security behavior.
  • Strong technical documentation skills, including the ability to clearly communicate reproduction steps, impact, and remediation guidance.
  • Experience working with engineering/application teams through vulnerability remediation and retesting.
  • Ability to manage multiple vulnerability investigations simultaneously with limited supervision.

Plus/Nice to Have Skills/Prior Experiences:(Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.)
  • Direct experience with HackerOne or another vulnerability disclosure/bug bounty platform.
  • Previous participation as a bug bounty researcher or vulnerability researcher.
  • Experience with cloud security, particularly AWS or Azure.
  • Experience testing APIs, mobile applications, authentication systems, or complex authorization models.
  • Familiarity with source-code review and secure coding practices.
  • Experience developing scripts or tooling in Python, PowerShell, JavaScript, or similar languages to assist vulnerability validation.
  • Familiarity with attack-surface management, asset discovery, threat hunting, or security detection engineering.
  • Security certifications such as OSCP, OSWE, BSCP, GWAPT, GPEN, or comparable hands-on experience.

EEO:
“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Cybersecurity Analyst Related jobs

United StatesCybersecurity Analyst

Other jobs at Mindlance

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.