Intigriti is looking for a Security Analyst to join its remote Security Operations team. In this role, you will review and validate vulnerability reports submitted by the global ethical hacking community, assess their impact, and provide expert remediation guidance to customers. You will play a key role in ensuring high-quality security assessments while fostering strong relationships with both researchers and client security teams.

You will investigate security reports, perform penetration testing and vulnerability validation, mentor junior analysts, and stay up to date with emerging cyber threats. This position is ideal for security professionals with experience in penetration testing, vulnerability management, and web application security who are passionate about collaborating with the ethical hacking community.

• Review, validate, and assess vulnerability reports submitted through the Intigriti platform.
• Research, reproduce, and verify reported security issues to ensure they are unique, actionable, and accurately documented.
• Handle ticket escalations and mediate communications between security researchers and customers.
• Mentor and coach junior Security Analysts.
• Prioritize workloads and proactively identify high-risk or escalation-prone reports.
• Assess business impact and calculate CVSS severity ratings for reported vulnerabilities.
• Provide constructive feedback to researchers and remediation guidance to customers.
• Build strong relationships with the ethical hacking community and customer success teams.
• Perform penetration testing and security validation for web applications, systems, and networks.
• Develop new testing methodologies and continuously monitor emerging malware and cybersecurity threats.
• Document findings, communicate security recommendations, and contribute to continuous process improvement.

• At least 2 years of professional experience in penetration testing, security testing, or vulnerability assessment.
• Strong understanding of ethical hacking practices and the bug bounty ecosystem.
• Knowledge of CVSS scoring methodology and vulnerability prioritization.
• Hands-on experience with web application security and the OWASP Top 10.
• Knowledge of mobile application security principles.
• Proficiency with Linux, macOS, and Windows operating systems.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills in English; Dutch is a plus.
• Ability to work independently in a fast-paced incident response environment.
• Willingness to participate in a 24/7 support rotation.
• Nice to have: Active bug bounty profile.
• Nice to have: CEH, CPT, CEPT, CPEN, OSWE, OSWA, EWPT, or EWPTX certifications.