Product Security Analyst at Intigriti

Greater London, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

07 Sep, 26

Salary

0.0

Posted On

09 Jun, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Penetration Testing, Vulnerability Assessment, CVSS Rating Calculation, Firmware Security, Network Security, Reverse Engineering, Binary Exploitation, Embedded Systems, SIEM, SOAR, Security Validation, Technical Communication

Industry

Computer and Network Security

Description

Your mission As a Product Security Analyst, you oversee incoming product security vulnerability reports from our researchers' community, while continuously sharpening their cybersecurity skills. All of this happens through dedicated interaction with the researcher's community and with the goal of offering the best possible service to both companies and researchers. You focus on customers that have their products as scope. This includes a wide variety of products: software libraries, native applications, firewalls, embedded systems, operating systems, firmware etc. When necessary you help out the rest of the team working on web and mobile applications. What you’ll be doing Challenge and support both researchers and security teams using your entire security skillset. Research, POC and evaluate reports that come in through our platform (make sure they're unique, concrete & actionable for our clients). Assess the severity of reported issues in relation to how they can disrupt business, including the financial and managerial implications. Familiarity with and ability to calculate CVSS ratings. Review and provide feedback on reports in a constructive and supportive manner. Motivate and engage security researchers to continuously outperform themselves. Build a positive relationship with our community, and customers in close collaboration with success management. Provide remediation advice and help customers make the most value out of received reports. Proactively identify and solve issues, as well as accept and quickly respond to delegated work. Communicate, document, and share your findings. Stay updated on the latest malware and security threats. Perform penetration tests and security validation on software libraries, firmware/hardware, embedded systems, computer systems, networks and applications. What you’ll bring Outstanding interpersonal abilities, and strong written and verbal communication skills. Fluent in English, both written and spoken. Bachelor’s degree or a combination of education and 3y of experience. Stress resistant & you can keep a clear focus on the resolution in an incident-context. Hands-on experience in pentesting, security testing, and vulnerability assessments, ... A strong understanding of the (Ethical) Hacker culture. Attention to detail, analytical and problem-solving capabilities. Able to independently find solutions to both technical and non-technical problems with no apparent answer (aggressive googling, stack overflow, etc). Flexible working hours, willing to take part in a 24x7 support organization. Positive service-oriented personality. Proven technology skills. You have knowledge of, or experience with, two or more of the following: Firmware security Network security Game hacking Reverse Engineering Embedded systems and FPGAs Binary exploitation SIEM, SOAR and observability solutions Operating system or driver hacking Nice to haves: Your very own bug bounty profile. Personal security research or disclosed vulnerabilities. OSCP, OSED, eJPT, CEPT, CPTS, CRTO, or other relevant certifications What is in it for you? ✅ Competitive salary ⏰ 26 days of annual leave and Bank Holidays ⭐ Top-notch Private Healthcare and Health Cash Plan ⭕ Hybrid working model ☕ Initial home office budget ✈️ 2-month work abroad policy ✍ Great training and yearly learning budget ⌛ Employer pension scheme ❇️ Enhanced maternity pay ⛹ Social activities and team outings ✨ Referral bonus ❓ Employee Assistance Program ⚡ Great hardware and access to the best tools to be successful in your role ☎️ Mobile subscription contribution Your team Why join us? Here are some great benefits of joining our team: Cybersecurity is a great place to be! The security industry is fast-paced and continues to grow even during times of economic uncertainty. We provide a clear career path and learning budget to help set you up for success. Join a company that’s making a real impact. In addition to our sustainability goals, we empower ethical hackers from all backgrounds to earn a living. Be yourself! Our international team celebrates individuality and places a strong focus on diversity and inclusion. We are the proud winners of the Deloitte Rising Star award in 2020, the Deloitte Fast 50 award in 2021 and Security Innovation of the Year 2025 at the UK IT Industry awards. We’re backed by top investors who are enabling us to grow internationally. About us Intigriti is a rapidly expanding global cybersecurity company specializing in crowdsourced security services to help organizations protect themselves from cybercrime. Our industry-leading bug bounty platform enables companies to tap into our global community of 150,000+ ethical hackers, who use their expertise to find and report vulnerabilities that may otherwise have gone unnoticed. More than 200 organizations, including Intel, Yahoo, and Red Bull, trust our platform to reduce the risk of cyber-attacks and data breaches. With cybersecurity becoming an increasingly important issue, our complementary security testing services have been designed to help companies of all sizes keep their digital assets secure. Founded in 2016, Intigriti now has a global team of 100+ employees spread across our offices in Belgium and the United Kingdom, alongside remote colleagues across the United States and Europe. With the backing of our recent Series B Funding, we’re planning on taking our growth to the next level. Are you ready to jump onboard the rocket ship?

Responsibilities

Oversee and evaluate product security vulnerability reports from a researcher community to ensure they are actionable for clients. Provide remediation advice and perform penetration tests on software libraries, firmware, and embedded systems.