Intermediate Security Analyst (Vulnerability Operations)

Location: Remote in Canada or the United States. Candidates across North America are eligible; West Coast US or British Columbia candidates are encouraged to support Pacific Time Zone coverage.

United States base salary: $115,000–$150,000 USD per year. The range applies to US residents and excludes bonuses, equity, and benefits.

Company

hirify.global provides an intelligent orchestration platform for DevSecOps, helping organizations improve developer productivity and software security.

What you will do

• Triage bug bounty reports by validating findings, assessing impact, identifying duplicates, and routing issues.
• Manage vulnerabilities through assessment, remediation tracking, closure, and follow-up.
• Collaborate with PSIRT engineers and development teams to reproduce issues and clarify affected products, versions, and configurations.
• Support CVE assignment and hirify.global's CVE Numbering Authority operations.
• Coordinate vulnerability communications with security researchers, customers, Legal, Support, Customer Success, and Communications.
• Monitor operational metrics and improve runbooks, documentation, procedures, and response workflows.

Requirements

• Early-career experience or equivalent education in cybersecurity, software engineering, information technology, or a related field.
• Foundational knowledge of software vulnerabilities, web applications, APIs, CI/CD environments, authentication, and authorization.
• Familiarity with CVE, CVSS, CWE, OWASP Top 10, and coordinated vulnerability disclosure.
• Experience with a bug bounty or vulnerability disclosure platform such as HackerOne or Bugcrowd.
• Strong attention to detail, organization, prioritization, and written and verbal communication skills.
• Must be eligible to work remotely from Canada or the United States.

Nice to have

• Basic scripting, log analysis, issue tracking, or data analysis experience.
• Experience writing technical documentation, customer communications, support responses, or operational procedures.
• Experience with CVE assignment, CNA processes, security advisories, or vulnerability databases.

Culture & Benefits

• Fully remote work with collaboration across a globally distributed team.
• Flexible paid time off.
• Health, financial, well-being, and parental leave benefits.
• Equity compensation and an employee stock purchase plan.
• Growth and development fund.
• Team member resource groups and a culture of continuous knowledge exchange.