Senior Security Engineer, Bug Bounty

Responsibilities

We are representing a confidential technology organization seeking a Senior Security Engineer to lead their bug bounty program. In this role, you will own and scale the web bug bounty program, including strategy development, prioritization, KPIs, and continuous improvement initiatives. You will serve as the primary interface with external security researchers and bug bounty platforms, building and maintaining a trusted research community.

Your day-to-day work will include leading triage and technical validation of incoming security reports across multiple channels, and driving end-to-end vulnerability remediation by partnering with engineering teams to ensure timely fixes. You will identify root causes and systemic security issues, influencing long-term improvements in secure development practices across the organization.

You will collaborate closely with the Security Incident Response Team on active incidents and post-incident reviews, and perform targeted code reviews—primarily in JavaScript and Python—during investigations and high-risk changes. Additionally, you will develop or leverage tooling to improve triage efficiency, signal quality, and program insights.

What We're Looking For

• 3+ years of demonstrated experience in a security engineering role
• Hands-on experience operating bug bounty programs, including program enhancements, automation, scaling, and/or bug hunting
• Practical experience with modern cloud technologies such as AWS, Google Cloud Platform, Azure, or Heroku
• Strong ability to analyze code and systems to move from vulnerability identification through root cause analysis to prevention
• Real-world experience in software development and/or engineering operations
• Ability to develop security tools in programming languages such as Python, Go, Rust, or JavaScript is a plus
• Excellent communication, collaboration, and problem-solving skills with the ability to influence cross-functional teams
• A growth mindset and genuine curiosity about security challenges

How We Work With You

Candidates apply through Get A Job.ai, where our talent team will review your background and conduct an initial screening. We will then submit qualified candidates to our client for consideration. Please do not contact the client directly—all communication should go through Get A Job.ai to ensure a smooth and professional process.

Pay

This is a remote position based in the United Kingdom. Pay information will be discussed during the screening process.

Equal Employment Opportunity

Get A Job.ai is committed to creating a diverse and inclusive environment. We welcome applications from all qualified candidates regardless of race, religion, gender, gender identity, sexual orientation, disability, age, or veteran status.