Bug Bounty Analyst

About the Role

Join a leading global payments company as a Bug Bounty Analyst in our Security Operations team, where you will be instrumental in managing our Bug Bounty Program. This fast-paced role involves daily assessment and coordination of vulnerability findings reported by ethical hackers, driving the remediation process and collaborating across business and security teams to safeguard company assets and enhance program maturity.

Key Responsibilities

• Evaluate and assign severity to vulnerabilities following the Common Vulnerability Scoring System (CVSS).
• Communicate findings clearly to both technical teams and non-technical stakeholders.
• Develop mitigation strategies and timelines for identified security issues.
• Coordinate remediation efforts in partnership with whitehat researchers across the Bug Bounty and Vulnerability Disclosure Programs.
• Analyze reported issues to detect any gaps in vulnerability scanning tools and address them with relevant teams.
• Identify absent security controls relevant to reported vulnerabilities and ensure remediation is completed.
• Contribute to program growth by onboarding new assets.
• Collaborate with Risk Management to document risks and issues surfaced through the Bug Bounty Program.
• Maintain knowledge of key data security frameworks and regulations such as PCI DSS, HIPAA, GDPR, PII standards, and NIST Cybersecurity Framework.
• Work with Legal and Privacy teams when critical data risks emerge from Bug Bounty findings.
• Maintain and adhere to operational runbooks for routine activities.

Required Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Security, or a related discipline, or equivalent practical experience.
• Minimum of two years’ experience in Vulnerability Management or directly handling Bug Bounty Programs.
• Knowledge of network operations, system administration (Unix, Linux, Windows), security operations, intrusion detection, SIEM tools, penetration testing, web app assessment, secure coding, and cloud technologies.

Preferred Credentials

• Professional security certifications such as CompTIA Security+, PenTest+, SSCP, CISM, CISA, or CEH.
• Advanced certifications including CCSLP, GIAC Web Application Defender (GWEB), eJPT, or OSCP.
• Familiarity with industry compliance frameworks like PCI, GDPR, and NIST Cybersecurity Framework.
• Experience using ticketing platforms such as ServiceNow or JIRA.

Desired Skills & Behaviours

• Strong communication skills, both verbal and written.
• Exceptional attention to detail and active listening skills.
• Ability to clearly convey ideas and influence stakeholders to meet challenging goals.
• Facilitation skills for meetings and discussions leading to effective resolutions.
• Proven vulnerability management skills with solid understanding of exploits and application/infrastructure security.
• Demonstrate problem-solving within defined procedures and the ability to build effective relationships internally and externally.
• Ability to work independently with minimal supervision on routine tasks.
• Commitment to continuous learning on emerging threats, vulnerabilities, and mitigating technologies.

About the Team and Culture

Be part of an inclusive, global team recognized for collaboration and excellence. At Global Payments, we foster innovation and ownership, encouraging curiosity and teamwork to drive impactful solutions worldwide. Our environment supports career growth beyond borders and values diverse perspectives.

Additional Information

Global Payments Inc. is proud to be an equal opportunity employer, embracing diversity and inclusion in its workforce.