Information Security Analyst
Harsh SrivastavaUnited StatesMIDPosted 6d ago
Penetration TestingWeb Application SecurityInfrastructure SecurityCVSSDREADServiceNowJiraAzure DevOpsPythonPowerShellAPIsAutomationLLM
About the Role
We are seeking an experienced Information Security Analyst to support and scale our Bug Bounty program through vulnerability validation, security finding triage, and automation. The ideal candidate will help improve security workflows and enable AI-driven validation and prioritization of vulnerabilities.
Key Responsibilities
• Perform web application and infrastructure penetration testing.
• Validate, reproduce, and triage bug bounty submissions, identifying false positives and duplicate findings.
• Assess and prioritize vulnerabilities using CVSS, DREAD, or similar frameworks.
• Collaborate with developers to remediate vulnerabilities and provide secure coding guidance.
• Integrate confirmed security findings into enterprise ticketing systems.
• Leverage scripting, APIs, automation, and AI-assisted tools to improve security workflows.
Requirements
• Minimum 7 years of hands-on penetration testing experience, clearly demonstrated on the resume.
• Strong experience in web application and infrastructure security testing.
• Familiarity with ServiceNow, Jira, Azure DevOps, or similar vulnerability management platforms.
• Experience with Python, PowerShell, APIs, automation, or LLM-based security workflows.
• Relevant certifications such as GPEN, OSCP, PenTest+, or equivalent are preferred.
• Ability to work onsite in San Antonio, TX.