Job description
Security Analyst, Whitehat Responsibilities:
- Analyze, assess, and respond to various security vulnerabilities we receive as part of our Whitehat program.
- Follow up with researchers on unclear reports.
- Understand the root cause of security vulnerabilities to help the product team fix them.
- Play an active role in continuing to grow and develop the bug bounty program and other internal security and privacy initiatives.
- Own expansions to the program, including private programs.
- Own critical submissions to resolution - liaise a plan with product teams, advise on the right mitigation strategy.
- Implement bug fixes and feature enhancements to the program’s public and internal code base.
Minimum Qualifications:
- Good communication skills.
- Familiarity with web security issues (e.g. OWASP top 10).
- Ability to follow bug reports, reproduce and triage them.
Preferred Qualifications:
- Experience writing in scripting languages and willingness to learn new languages.
- Participation in bug bounty programs (not necessarily Facebook’s bug bounty program).
- 2+ years of experience analyzing source code to find security vulnerabilities.
- Contributions to the security community (public research, blogging, presentations, etc).