Senior Security Engineer (Bug Bounty)

TL;DR

Senior Security Engineer (Bug Bounty): Managing and scaling hirify.global's web bug bounty program with an accent on vulnerability triage, researcher relations, and remediation. Focus on root cause analysis, partnering with engineering teams to fix security incidents, and improving secure development practices.

Location: Remote (US)

Salary: $116,000 - $183,000 USD (depending on location tier)

Company

hirify.global is a non-profit-backed technology company that creates pioneering open-source brands like Firefox to make the internet a global public resource.

What you will do

• Own and scale the web bug bounty program, including strategy, KPIs, and continuous improvement.
• Manage relationships with external researchers and platforms such as HackerOne.
• Lead technical validation and triage of incoming security reports across multiple channels.
• Coordinate end-to-end vulnerability remediation by partnering with engineering teams.
• Identify systemic security issues to influence long-term secure development practices.
• Perform targeted code reviews in JavaScript and Python and develop tooling to improve triage efficiency.

Requirements

• 3+ years of experience in a security engineering role.
• Experience operating or hunting in bug bounty programs.
• Practical experience with cloud technologies (AWS, GCP, Heroku, or Azure).
• Ability to perform root cause analysis from vulnerability detection to prevention.
• Real-world experience in software development or engineering operations.
• Must be based in the United States.

Nice to have

• Ability to develop tools in Python, Go, Rust, or JavaScript.

Culture & Benefits

• Performance-based bonus plans and comprehensive medical, dental, and vision coverage.
• Generous retirement contributions with 100% immediate vesting.
• Quarterly all-company wellness days and a one-time home office stipend.
• Annual professional development budget and quarterly well-being stipend.
• Considerable paid parental leave and birthday day off.