Senior Information Security Analyst – Penetration Tester

Senior Information Security Analyst (Penetration Tester) to support automated validation and scaling of a Bug Bounty program in San Antonio, TX (onsite) on a 12-month contract.

Responsibilities

• Conduct web application and infrastructure penetration testing to uncover vulnerabilities and potential attack paths.
• Review, validate, reproduce, and triage Bug Bounty submissions to determine legitimacy, severity, and business impact.
• Identify false positives, duplicates, and reports that are incomplete or inaccurate.
• Evaluate and prioritize security findings using risk assessment methods such as CVSS, DREAD, or similar frameworks.
• Document confirmed vulnerabilities and create or update tickets in enterprise vulnerability management and ticketing platforms.
• Work with software developers and security teams to support remediation and provide secure coding recommendations.
• Develop and improve workflows for vulnerability validation, triage, prioritization, and reporting.
• Use scripting, automation, APIs, and AI-assisted tools to improve efficiency and scalability of security operations.
• Contribute to AI-driven processes for validating and prioritizing security findings.
• Maintain clear technical documentation covering findings, risk assessments, remediation recommendations, and test results.
• Support continuous improvement of the Bug Bounty program and associated vulnerability management processes.

Requirements

• Proven experience performing web application and infrastructure penetration testing.
• Hands-on ability to validate, reproduce, and triage vulnerabilities and Bug Bounty submissions.
• Strong knowledge of vulnerability assessment, risk analysis, and severity classification using CVSS, DREAD, or comparable methodologies.
• Experience partnering with developers to remediate issues and provide practical secure coding guidance.
• Familiarity with vulnerability management and enterprise ticketing tools such as ServiceNow, Jira, Azure DevOps, or similar.
• Experience using scripting languages, automation frameworks, APIs, or AI-assisted workflows to streamline security testing and analysis.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to clearly communicate technical vulnerabilities and risk implications to technical stakeholders.

Technologies

• ServiceNow
• Jira
• Azure DevOps
• CVSS
• DREAD
• Python
• PowerShell
• LLMs

Preferred Qualifications

• Industry-recognized penetration testing or security certifications, such as:
  • GIAC Penetration Tester (GPEN)
  • Offensive Security Certified Professional (OSCP)
  • CompTIA PenTest+
  • Other equivalent industry-recognized certifications
• Experience supporting or scaling Bug Bounty programs.
• Familiarity with large-scale vulnerability management processes and automated security finding ingestion.
• Experience with Python, PowerShell, or similar scripting languages.
• Exposure to large language models (LLMs) and AI-assisted security validation, analysis, and prioritization workflows.

Benefits

• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Contract Details

• Location: San Antonio, TX (On-Site Required; 1-2 days remote in San Antonio)
• Contract length: 12 months
• Position type: Contract
• Expected hours: 40.0 per week
• Rate: $65-$67/Hr. (W2 Only)
• Pay: $65.00 - $67.00 per hour
• Work location: In person