Security Analyst

RunSybil

8d•$130,000 - $160,000•Remote

About The Position

RunSybil is hiring a Security Analyst to join its security research team. The analyst will work hands-on with web application vulnerabilities, assessing findings, confirming exploitability, rating severity, and producing clear, accurate reports that help customers understand and remediate risk. The role emphasizes practical web security knowledge, careful analytical judgment, and precise communication rather than software engineering experience. The position is remote in the US.

Requirements

At least 2 years of hands-on experience with web application vulnerabilities through bug bounty, penetration testing, application security, or a similar role.
Practical understanding of the OWASP Top 10 and common web vulnerability classes, including experience finding and confirming them.
Experience manually reproducing and validating findings, including in ambiguous or noisy environments.
Comfort using Burp Suite, browser developer tools, or similar tools for hands-on verification.
Strong written communication skills, including explaining vulnerabilities, impact, and remediation in plain language.
Attention to detail and consistency when assessing findings.
Ability to manage work independently.

Responsibilities

Assess and validate web application vulnerabilities across a range of targets, confirming exploitability and scope.
Reproduce findings hands-on using tools such as Burp Suite.
Rate severity accurately using established frameworks such as CVSS and OWASP.
Write clear, accurate, customer-facing finding descriptions and remediation guidance.
Maintain consistent standards across a high volume of findings.
Surface patterns, edge cases, and unusual behaviors to the broader team.
Identify patterns across findings and share feedback on how Sybil can improve.