LP
Senior IT Security Specialist (GRC / IT Audit / Remediation Validation)
LinkedIn Recruiter Post
Senior IT Security Specialist (GRC/IT Audit) needed for hybrid role in Toronto/Mississauga. 10+ years experience, CISA required.
About the role
- Security Analyst triaging bug bounty vulnerabilities for Stripe’s financial infrastructure platform. Driving researcher engagement, remediation coordination, vulnerability analysis, and bug bounty program improvements.
Responsibilities
- Analyze, assess, reproduce, and triage incoming security vulnerability reports from the bug bounty program
- Communicate with security researchers to clarify reports and increase engagement with top hackers
- Understand vulnerability root causes and advise product and engineering teams on mitigation strategies
- Drive submissions through resolution with product and engineering stakeholders
- Bridge external researchers and internal teams to facilitate rapid remediation
- Analyze bug-report data and vulnerability patterns to identify systemic risks and inform security initiatives
- Provide tactical support for vulnerability-management triage processes
- Implement improvements to the bug bounty program, including researcher campaigns and scoring transparency
- Provide feedback and requirements for tool development and leverage automation opportunities
Requirements
- Proven ability to follow bug reports and accurately triage security vulnerabilities
- Familiarity with web security issues and exploit methodologies, including OWASP Top 10 and CWEs
- Competence with offensive security tools, such as Burp Suite and custom scripting
- Ability to think like an attacker to understand vulnerability impact
- Proficiency in clear communication of technical concepts to various stakeholders
- Experience in bug bounty programs or triaging security vulnerability reports, or knowledge of Stripe products and general security expertise
- Preferred: experience in technical support, operations, or similar technical systems roles
- Preferred: prior participation in or experience with bug bounty programs
- Preferred: experience analyzing source code for security vulnerabilities
- Preferred: proficiency in Python or Ruby for automation
- Preferred: familiarity with AWS or GCP
- Preferred: OSWA or BSCP certifications
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Azure AD Security Analyst leading identity and access management for Intact, a Canadian insurer. Integrating Azure AD, supporting IAM architecture, automation, privileged access, and major incidents.
Analyste sécurité informatique chez Beneva, compagnie d’assurance et de services financiers. Intégration des contrôles IAM, analyse des exigences de sécurité et accompagnement des équipes applicatives.
Security Analyst leading Cyber Threat Exposure Management transformation for iA Financial Group, a Canadian insurance and wealth - management provider. Coordinating risk reduction, governance, and cross - functional CTEM initiatives.
Cybersecurity Compliance Analyst supporting Ledcor’s diversified construction business. Managing control assessments, audits, vendor cyber risk, and regulatory compliance reporting.
Senior Security Risk Analyst at Twilio enhancing security risk management and collaborating with cross - functional teams. Focused on identifying and mitigating cyber risks effectively and ensuring compliance.
Experienced Workday Reporting, Security & HRIS Analyst supporting HR, Payroll, IT, Finance teams with Workday solutions. Involves configuration, reporting, and collaboration with various business units.
LP
Senior Information & Data Security Analyst
LinkedIn Recruiter Post
🔐 We’re Hiring: Senior Information & Data Security Analyst 📍 Location: Toronto 🧷 https://lnkd.in/gR6WtJGs
LP
IT – Info Security Analyst IV
LinkedIn Recruiter Post
Hiring IT Info Security Analyst IV for a 12 - month contract in Toronto, ON. Focus on access management, governance, ServiceNow, and Jira.
LP
Security Analyst
LinkedIn Recruiter Post
Hiring a Security Analyst for a 2 - year contract in Regina, SK. Manage security incidents, monitor threats, and support enterprise security operations.