Responsibilities
- Respond to and triage alerts relating to phishing attacks, impersonation, scams, and brand abuse (e.g. Sublime, Doppel), escalating credible threats where appropriate.
- Coordinate day-to-day operation of the bug bounty program, including communication with researchers, issue tracking, reporting, and internal follow-up.
- Conduct user access reviews and review security settings, access configurations, and administrative controls across business systems, SaaS platforms, and internal infrastructure, tracking remediation where required.
- Support recurring operational security workflows, including documentation, process tracking, and follow-up.
Requirements
- 2+ years of experience in a security-focused role, such as security operations, IAM, application security support, operational security, or a similar domain.
- Familiarity with core security concepts including phishing, authentication, access control, least privilege, and common vulnerability classes.
- Ability to manage multiple concurrent workflows with strong attention to detail and reliable follow-through.
- Clear written communication and confidence coordinating across technical and non-technical stakeholders.
- Self-motivated, organized, and comfortable operating independently in a remote-first environment with minimal supervision.
Nice to Have
- Experience automating operational workflows using LLMs or AI tooling (e.g. Claude).
- Familiarity with common web application vulnerabilities (e.g. OWASP Top 10).
- Exposure to vulnerability disclosure / bug bounty workflows.
- Experience with SaaS administration, access reviews, or IAM processes.
- Experience in web3 environments or familiarity with common web3 threat patterns.
Work Arrangement
Remote (Worldwide)
