Vulnerability Disclosure

Vulnerability Disclosure Cybersecurity Jobs

2 jobs found

30d ago

Product Security Engineer

Adobe Lehi, UT

Lehi, UT

30d ago Closed

$67 - $84/hr Contract Api Security Application Security Cloud Platforms

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

Adobe, operating through NextDeavor, invites a Contract Product Security Engineer to manage triage, validation, and remediation of external vulnerability reports while coordinating with engineering teams to enhance the bug bounty program.

Location

Lehi, UT (onsite)

Engagement Type

Contract

Responsibilities

Triage incoming vulnerability reports from the bug bounty platform, assessing validity, impact, and scope.
Assign CVSS scores and severity ratings in line with internal guidelines and industry standards.
Reproduce proof-of-concept exploits across web, API, and mobile surfaces to validate reports.
Communicate with external researchers to request clarifications, provide status updates, and manage expectations.
Coordinate confirmed vulnerabilities with product engineering teams for remediation.
Identify duplicates, out-of-scope, or informational reports and close them with clear explanations.
Contribute to internal documentation, triage runbooks, and severity calibration guidelines.
Flag systemic or critical findings to the Bug Bounty team for escalation.

Requirements

3+ years of experience in application security, penetration testing, or a bug bounty/vulnerability disclosure role.
Strong understanding of CVSS v3.1 and hands-on experience applying it to real-world vulnerabilities.
Proficiency with common web vulnerability classes: XSS, SQL injection, SSRF, IDOR, authentication flaws, and business logic issues.
Ability to reproduce and validate PoC exploits using tools such as Burp Suite, browser DevTools, curl, and custom scripts.
Familiarity with bug bounty platforms (e.g., HackerOne, Bugcrowd) and responsible disclosure processes.
Solid written communication skills for clear, constructive responses to external researchers.
Familiarity with attacker techniques against LLM systems and generative AI products.
Knowledge of OWASP Top 10 vulnerabilities and mitigation techniques.

Technologies

Burp Suite
Browser DevTools
curl
HackerOne
Bugcrowd
AWS
Azure
GCP

Benefits

Health insurance
Vision insurance
Dental insurance
401(k)
Paid sick leave

Compensation

Rate: $67.61–$84.51 per hour

Application

This role may fill quickly. Submit your resume to be considered.

View full job page →

1mo ago

IT Specialist (INFOSEC) - Direct Hire

US Export-Import Bank of the United States Washington, DC

Washington, DC

1mo ago Closed

$144k - $187k/yr Full time Agentic Security Ai Enabled Security Cybersecurity Tools

This position is no longer accepting applications (closed Aug 5, 2026).

Job Description

This Direct Hire IT Specialist (Information Security) role at the Export-Import Bank of the United States centers on leading security operations, incident response, and ongoing modernization of cyber defenses from our Washington, DC campus. The position is budgeted at USD 143,913 to 187,093 per year and is processed under Direct Hire authority.

Responsibilities

Serve as the operational authority for the Bank's Security Operations Center (SOC) and Computer Incident Response Team (CIRT). Direct enterprise detection and response across on premises, cloud, and externally hosted environments. Establish incident classification standards, response thresholds, escalation protocols, and operational response procedures. Exercise authority to declare cybersecurity incidents, direct containment and coordination actions, and initiate executive escalation.
Own the design, tuning, and operational performance of enterprise monitoring capabilities. Direct development of detection logic, correlation rules, alert thresholds, analytic use cases, and investigative workflows to improve threat visibility and reduce false positives. Ensure logging and telemetry coverage across identity systems, endpoints, networks, cloud platforms, and SaaS services.
Establish and monitor SOC performance indicators measuring detection latency, response timeliness, incident recurrence, systemic control weaknesses, and contractor service effectiveness. Develop executive dashboards and operational reports on cyber risk posture and threat patterns. Evaluate managed security services and external providers to ensure proper monitoring, escalation, and reporting.
Oversee the Bank's vulnerability management program, including the Vulnerability Disclosure Program. Conduct vulnerability and configuration baseline scans, address technical concerns with stakeholders, track mitigations, and coordinate requests for risk acceptances. Monitor end-of-life software and prepare required directives and data calls related to vulnerability and patch management.
Lead the modernization of the SOC through agentic security capabilities, autonomous workflows, and AI enabled cyber defense technologies. Establish governance and oversight to keep agentic tools controlled and auditable, and identify opportunities to augment analysts via automation, orchestration, and decision support.

Requirements

U.S. Citizenship
Background and Security/Suitability Investigation
One year probationary period may be required
Specialized experience must be documented on your resume
Current or Former Political Appointees: disclosure required; failure to disclose may result in disciplinary action
CRITICAL SENSITIVE National Security position requiring Top Secret and SCI access
May require financial disclosure of personal and immediate family holdings and interests
Fully completed and favorably adjudicated National Security Background Investigation current within the last five years (SSBI or SSBI-PR)
Specialized Experience at GS-14 level requires one year of experience equivalent to GS-13 level or higher, with duties related to the position
Experience providing practical and technical leadership in continuous monitoring, situation awareness and threat assessment, vulnerability management, and incident response operations
Experience in selection, acquisition, deployment, configuration, and use of cybersecurity tools
Experience serving as a Technical Point of Contact (TPOC) or Contracting Officer Representative (COR) for IT Operational Security Services, tools and projects
Competencies required for qualification include:
- Attention to Detail: thorough and detail oriented
- Customer Service: anticipates and meets internal and external needs with high quality outcomes
- Oral Communication: clear, concise, effective in presentations and written communication
- Problem Solving: analyzes information, weighs alternatives, and makes sound recommendations
Education cannot substitute for experience at the GS-14 level
For each listed work experience, resumes must include:
- Organization/Agency name
- Title and salary (series/grade if applicable)
- Start and end dates (month/year)
- Hours per week
- Relevant experience that supports the specialized requirements
Foreign Education: provide transcripts and proof of U.S. accreditation for foreign study if applicable
All requirements must be met by 07/15/2026

Required Documents

Your Resume with job title, series/grade (if federal), duties and accomplishments, employer, start/end dates, hours per week, and salary
Unofficial Transcripts if education is used to qualify
Proof of U.S. accreditation for foreign study, if applicable
Special Priority Selection rights CTAP/ICTAP documentation: agency notice, performance appraisal, SF-50 showing tenure and position details
Proof of Veteran's Preference: DD-214 or SF-15 with supporting documentation as applicable
Submit any other documents listed in the vacancy announcement
Note that incomplete submissions may affect eligibility

Benefits

A career with the U.S. government provides a comprehensive benefits package. Benefits eligibility depends on the type of position and employment status. This includes health, retirement, and other core federal employee benefits. Review the agency's specified benefits for full details.

Additional Information

Current or Former Political Appointees: OPM requires approval prior to appointment to a permanent civil service position
CTAP/ICTAP eligibility applies to current or former federal employees; others should review eligibility resources
Veterans: All veterans must meet qualification requirements for consideration
Selective Service: Male applicants born after December 31, 1959 must certify registration or exemption
Reasonable accommodation is available during the application and hiring process upon request
Ethical Standards and Financial Disclosure: new employees must complete ethics training within 3 months; may be required to file a financial disclosure based on position

View full job page →

Vulnerability Disclosure Cybersecurity Jobs

Product Security Engineer

IT Specialist (INFOSEC) - Direct Hire

Get Vulnerability Disclosure Cybersecurity Jobs alerts