Application Security Intern securing Kinaxis’s AI - powered supply - chain orchestration platform. Testing applications, managing vulnerabilities, and improving DevSecOps controls in Ottawa.
About the role
- Security Analyst triaging bug bounty vulnerabilities for Stripe’s financial infrastructure platform. Driving researcher engagement, remediation coordination, vulnerability analysis, and bug bounty program improvements.
Responsibilities
- Analyze, assess, reproduce, and triage incoming security vulnerability reports from the bug bounty program
- Communicate with security researchers to clarify reports and increase engagement with top hackers
- Understand vulnerability root causes and advise product and engineering teams on mitigation strategies
- Drive submissions through resolution with product and engineering stakeholders
- Bridge external researchers and internal teams to facilitate rapid remediation
- Analyze bug-report data and vulnerability patterns to identify systemic risks and inform security initiatives
- Provide tactical support for vulnerability-management triage processes
- Implement improvements to the bug bounty program, including researcher campaigns and scoring transparency
- Provide feedback and requirements for tool development and leverage automation opportunities
Requirements
- Proven ability to follow bug reports and accurately triage security vulnerabilities
- Familiarity with web security issues and exploit methodologies, including OWASP Top 10 and CWEs
- Competence with offensive security tools, such as Burp Suite and custom scripting
- Ability to think like an attacker to understand vulnerability impact
- Proficiency in clear communication of technical concepts to various stakeholders
- Experience in bug bounty programs or triaging security vulnerability reports, or knowledge of Stripe products and general security expertise
- Preferred: experience in technical support, operations, or similar technical systems roles
- Preferred: prior participation in or experience with bug bounty programs
- Preferred: experience analyzing source code for security vulnerabilities
- Preferred: proficiency in Python or Ruby for automation
- Preferred: familiarity with AWS or GCP
- Preferred: OSWA or BSCP certifications
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Threat Intelligence Analyst investigating telecom security threats and customer deployment data for Enea, a global telecom and cybersecurity software company. Supporting client security reviews and threat intelligence operations.
Information Security Analyst governing End - User Computing risks, controls, and remediation for TD, a major North American bank. Advising stakeholders and supporting governance reporting, audits, and regulatory requirements.
IT Security Analyst II coordinating cybersecurity monitoring, MSP oversight, audits, and incident follow - up. Supporting Veristat’s global life - sciences services and regulated technology environments.
Senior compliance analyst supporting Motorola Solutions’ mission - critical communications and analytics security programs. Managing audits, risk assessments, regulatory compliance, and information security governance.
Security Analyst protecting GitLab’s DevSecOps platform through vulnerability triage and CVE operations. Coordinating researchers, customers, and internal teams on secure software response.
SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.
Security analyst strengthening Desjardins's security posture through risk analysis, governance, and security controls. Supporting clients, partners, and cross - functional stakeholders.
Security Analyst II protecting Intact’s insurance operations through incident response and SIEM monitoring. Supporting security platforms, incident resolution, dashboards, and IT security initiatives.