We are looking for a Security Analyst to join our security research team. You will work hands-on with web application vulnerabilities every day, assessing findings, confirming exploitability, rating severity, and delivering clear, accurate reports that customers rely on to understand and remediate their risk.

This role does not require software engineering experience. It requires deep familiarity with web vulnerabilities, sharp analytical judgment, and the ability to communicate findings precisely. If you have spent time in bug bounty, application security, or pentesting and have a strong eye for what is real and what is noise, we want to hear from you.

Assess and validate web application vulnerabilities across a range of targets and confirm exploitability and scope

Reproduce findings hands-on using tools like Burp Suite

Rate severity accurately using established frameworks such as CVSS and OWASP

Write clear, accurate, customer-facing finding descriptions and remediation guidance that security practitioners trust and developers can act on

Maintain consistent standards across a high volume of findings

Surface patterns, edge cases, and unusual behaviors to the broader team

Identify patterns across findings and share feedback on where and how Sybil can improve

We Are Looking for Someone Who Brings

2 or more years of hands-on experience with web application vulnerabilities through bug bounty, penetration testing, application security, or a similar role

Solid, practical understanding of OWASP Top 10 and common web vulnerability classes: you have actually found and confirmed these, not just read about them

Security Analyst

Responsibilities

Qualification

Required

Benefits

Company

Runsybil Jobs

More roles at Runsybil Jobs