Security Triage Analyst
Verda is a Helsinki-headquartered full-stack AI cloud provider offering on-demand GPU compute, clusters, serverless containers, storage, APIs, and related AI infrastructure.
Funding history
About Verda
Formerly DataCrunch, Verda operates European AI cloud infrastructure for the full AI lifecycle, from prototyping and distributed model training to scalable inference. It manages data-center infrastructure, hardware, cloud-platform services, and an in-house AI Lab.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will review and validate security vulnerability reports, safely reproduce findings, assess their impact, and communicate defensible decisions. You will create actionable engineering tickets, keep high-priority reports moving, and improve triage processes, guidance, metrics, and workflows.
Requirements
- 5+ years of experience in vulnerability triage, application security, penetration testing, security operations, or a related security role
- Vulnerability validation
- Web application security
- API security
- Authentication
- Authorization
- Access control
- CORS
- Rate limiting
- SSRF
- Injection
- File handling
- Business logic security
- Cloud security
- Network security
- Kubernetes
- Burp Suite
- curl
- Browser developer tools
- API client
- Logging
- Scripting
- CVSS
- Duplicate analysis
- External researcher communication
Responsibilities
- Review incoming vulnerability reports from researchers, testing platforms, and internal assessments
- Validate affected assets and safely reproduce findings
- Classify findings and document defensible decisions
- Assess severity and impact using CVSS and environmental context
- Coordinate with security and engineering stakeholders to evaluate findings
- Communicate with researchers, triage teams, and vendors
- Create actionable internal tickets for valid findings
- Prioritize high and critical reports and maintain queue hygiene
- Improve report templates, severity rules, workflows, and triage metrics
- Handle sensitive security materials carefully
Benefits
- Equity compensation
- Fringe benefits
