NCC Group

Compensation

Full Description

Position Title: Security Analyst – Bug Bounty Location: NA Role Purpose: Analyze and fully reproduce potential security findings reported to our clients. Communicate with the global researcher community to gather information and inform them of triage analysis outcomes. Author and deliver NCC-quality vulnerability reports to the specifications of individual clients. Drive or contribute to projects that improve Bug Bounty Services’ tooling, operational processes, and delivery quality. Summary: Due to continued growth, NCC Group is seeking an experienced Bug Bounty Triager to join the Bug Bounty Services (BBS) Practice as a Security Analyst on our Tier 1 Triage Team. As the premiere triage team in the bug bounty domain, the team’s Security Analysts have the unique opportunity to directly engage with security researcher community on their findings on behalf of our Enterprise clients. The Tier 1 Triage team is fully distributed in NA, EMEA, and APAC, and this role directly reports to BBS’ Spain-based Director of Triage. What we are looking for in you: Native speaker or CEFRL C2 English language proficiency Proven experience in web application, network, and mobile application security testing. Strong knowledge in OWASP Top 10 Recent professional experience that required regular use of a programming scripting language Vulnerability Disclosure and Bug Bounty experience. Vulnerability Management experience is a plus. Software QA experience is a plus. Experience with SAST and DAST testing tools is a plus. Behaviours: Focusing on Clients and Customers. Working as One NCC. Always Learning. Being Inclusive and Respectful. Delivery Brilliantly. Why NCC Group? At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks. Our colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support. Are you ready to triage security vulnerabilities reported by some of the world's top ethical hackers for the most prominent global companies? So, what’s next? If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and the relevant member of our global talent team will be in touch with you. Alternatively send your details to global.ta@nccgroup.com . About your application We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email global.ta@nccgroup.com. All personal data is held in accordance with the NCC Group Privacy Policy (candidate-privacy-notice-261023.pdf (nccgroupplc.com)). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage. The NCC Group family has over 2,200 members located all around the world, providing a trusted advisory service to 15,000 customers. Born in the UK, we have now have offices in North America, Canada, Europe, Asia- Pacific and United Arab Emirates. We are passionate about helping our customers to protect their brand, value and reputation against the ever-evolving threat landscape. We fuel that passion with investment in our people and our business. Our values and code of ethics are at the heart of how we operate – we work together, we are brilliantly creative and we embrace difference. We treat everyone and everything with equal respect. We want to create an environment where all colleagues feel psychologically, emotionally and physically safe to be authentic, sharing their personal experiences to represent the diversity of the world they live in, and have equal opportunity to achieve their best.