Product Security Analyst

Intigriti•Boston, MA

23h•Remote

About The Position

As a Product Security Analyst, you oversee incoming product security vulnerability reports from our researchers' community, while continuously sharpening their cybersecurity skills. All of this happens through dedicated interaction with the researcher's community and with the goal of offering the best possible service to both companies and researchers. You focus on customers that have their products as scope. This includes a wide variety of products: software libraries, native applications, firewalls, embedded systems, operating systems, firmware etc. When necessary you help out the rest of the team working on web and mobile applications.

Requirements

Outstanding interpersonal abilities, and strong written and verbal communication skills.
Fluent in English, both written and spoken.
Bachelor’s degree or a combination of education and 3y of experience.
Stress resistant & you can keep a clear focus on the resolution in an incident-context.
Hands-on experience in pentesting, security testing, and vulnerability assessments, ...
A strong understanding of the (Ethical) Hacker culture.
Attention to detail, analytical and problem-solving capabilities.
Able to independently find solutions to both technical and non-technical problems with no apparent answer (aggressive googling, stack overflow, etc).
Flexible working hours, willing to take part in a 24x7 support organization.
Positive service-oriented personality.
Proven technology skills.
You have knowledge of, or experience with, four or more of the following: Web application security, Mobile application security, Network security, Game hacking, Embedded systems and FPGAs, Binary exploitation, SIEM, SOAR and observability solutions, Operating system or driver hacking.

Nice To Haves

Your very own bug bounty profile.
Personal security research or disclosed vulnerabilities.
OSCP, OSED, eJPT, CEPT, CPTS, CRTO, or other relevant certifications

Responsibilities

Challenge and support both researchers and security teams using your entire security skillset.
Research, POC and evaluate reports that come in through our platform (make sure they're unique, concrete & actionable for our clients).
Assess the severity of reported issues in relation to how they can disrupt business, including the financial and managerial implications.
Familiarity with and ability to calculate CVSS ratings.
Review and provide feedback on reports in a constructive and supportive manner.
Motivate and engage security researchers to continuously outperform themselves.
Build a positive relationship with our community, and customers in close collaboration with success management.
Provide remediation advice and help customers make the most value out of received reports.
Proactively identify and solve issues, as well as accept and quickly respond to delegated work.
Communicate, document, and share your findings.
Stay updated on the latest malware and security threats.
Perform penetration tests and security validation on software libraries, firmware/hardware, embedded systems, computer systems, networks and applications.