Associate Security Analyst

The Opportunity

A leading global information assurance organization is seeking a dedicated Associate Security Analyst to join its specialized vulnerability research and triage team. This role offers a unique opportunity to act as a primary point of contact for the global security researcher community, analyzing their findings to protect high-profile enterprise clients. The successful candidate will join a distributed global team and contribute to a mission of creating a safer digital environment through expert analysis and reporting.

The Challenge

In this role, you will be responsible for the end-to-end evaluation of potential security vulnerabilities. Your core objectives include:

• Vulnerability Analysis: Investigating and fully reproducing security findings reported by external researchers to validate their impact.
• Community Engagement: Communicating directly with the global security research community to gather additional information and relay technical analysis results.
• Technical Reporting: Drafting and delivering high-quality, comprehensive vulnerability reports tailored to the specific technical requirements of individual clients.
• Process Improvement: Actively contributing to projects aimed at enhancing internal security tools, operational workflows, and the overall quality of service delivery.

Essential Skills & Qualifications

• We are looking for candidates who possess a strong technical foundation and a passion for cybersecurity:
• Technical Communication: Strong technical writing skills with the ability to explain complex security concepts clearly.
• Security Expertise: Professional experience in web application, network, and/or mobile security.
• Core Knowledge: Thorough understanding of the OWASP Top 10 and familiarity with standard security testing tools.
• Technical Proficiency: Recent professional experience involving the regular use of a programming or scripting language.
• Advantageous Experience: Prior experience in Bug Bounty programs, Penetration Testing, or Software Quality Assurance (QA) is considered a significant plus.

Additional Information

Work Schedule: For training and alignment purposes, the first six months of this role will require a specialized working schedule to ensure overlap with regional leadership.

Background Checks: Due to the nature of our security work, successful candidates must be willing to undergo a standard pre-employment vetting process.

Originally posted on Himalayas