Security Triage Analyst

Skills

About the Role

You will review and validate security vulnerability reports, safely reproduce findings, assess their impact, and communicate defensible decisions. You will create actionable engineering tickets, keep high-priority reports moving, and improve triage processes, guidance, metrics, and workflows.

Requirements

• 5+ years of experience in vulnerability triage, application security, penetration testing, security operations, or a related security role
• Vulnerability validation
• Web application security
• API security
• Authentication
• Authorization
• Access control
• CORS
• Rate limiting
• SSRF
• Injection
• File handling
• Business logic security
• Cloud security
• Network security
• Kubernetes
• Burp Suite
• curl
• Browser developer tools
• API client
• Logging
• Scripting
• CVSS
• Duplicate analysis
• External researcher communication

Responsibilities

• Review incoming vulnerability reports from researchers, testing platforms, and internal assessments
• Validate affected assets and safely reproduce findings
• Classify findings and document defensible decisions
• Assess severity and impact using CVSS and environmental context
• Coordinate with security and engineering stakeholders to evaluate findings
• Communicate with researchers, triage teams, and vendors
• Create actionable internal tickets for valid findings
• Prioritize high and critical reports and maintain queue hygiene
• Improve report templates, severity rules, workflows, and triage metrics
• Handle sensitive security materials carefully

Benefits

• Equity compensation
• Fringe benefits