Security Analyst, NCC Group
Leading cyber security & managed services
Be an early applicant
Leading cyber security & managed services
1001+ employees
Be an early applicant
1001+ employees
Company mission
To help keep customers safe and secure.
Role
Who you are
- Excellent written and verbal communication skills
- Proven experience in web application, network, and mobile application security testing
- Strong knowledge in OWASP Top 10
- Recent professional experience that required regular use of a programming scripting language (E.g., Python, JavaScript)
- Vulnerability Disclosure and Bug Bounty experience
- Vulnerability Management experience is a plus
- Software QA experience is a plus
- Experience with SAST and DAST testing tools is a plus
- Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process
What the job involves
- As a Bug Bounty Analyst, you will act as the first line of validation for vulnerability submissions
- You will work directly with the Bug Bounty researcher community to accurately reproduce and validate submissions and provide clients with technical writeups for any actionable findings
- When triaging vulnerability submissions, analysts must assess the reproducibility, the real-world security impact, and that the reported issue is in scope so that submissions can be successfully filtered prior to escalating to the client
- Bug Bounty Analysts serve as a trusted intermediary between the researcher community and the client and therefore must have strong technical capabilities balanced with the ability to deliver clear, professional communication
- Due to continued growth, NCC Group is seeking an experienced Bug Bounty Triage analyst to join the Bug Bounty Services (BBS) Practice as a Security Analyst on our Tier 1 Triage Team
- As the premiere triage team in the bug bounty domain, the team’s Security Analysts have the unique opportunity to directly engage with security researcher community on their findings on behalf of our Enterprise clients
- The Tier 1 Triage team is fully distributed in NA, EMEA, and APAC, and this role directly reports to BBS’ UK-based Triage Team Lead
- Reproduce reported vulnerabilities in a controlled manner to confirm their validity
- Ensure that all validated reports meet quality standards for clarity, accuracy, and reproducibility before escalation to the client
- Communicate professionally and constructively with the security researcher community, requesting information and provided clarification where needed
- Communicate clearly and professionally with Enterprise clients ensuring that technical details are
- Identify and appropriately handle out-of-scope reports, duplicates, and low-quality AI submissions
- Manage client queues to meet agreed response and validation timeframes
- Author and deliver NCC-quality vulnerability reports to the specifications of individual clients
- Drive or contribute to projects that improve BBS’ tooling, operational processes, and delivery quality
Application process
- We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles
Our take
NCC Group is a global cyber and software resilience businesses that assesses, develops and manages cyber threats. The company operates across multiple sectors, geographies and technologies but with the universal mission of communicating the best ways to keep businesses, software and personal data safe.
As we become more entrenched in the digital age, businesses are more vulnerable to cyber-related risk, and this is where NCC Group comes in. Its services work to make the Internet safer and to change the way that organisations think about cyber security. It continues to build momentum as our society becomes increasingly connected but more uncertain.
NCC Group's role is only set to grow too. As technology evolves and cyber threats become more sophisticated, businesses and individuals will need trusted partners to navigate the risks. NCC Group's expertise, global reach, and proactive approach puts it in a position to help organisations not only respond to threats, but to stay ahead of them.
Steph
Company Specialist at Welcome to the Jungle
Insights
-4% employee growth in 12 months
Company
Company HQ
Spinningfields, Manchester, UK
Leadership
Mike Maddison
(Group CEO)Former head of EY’s cyber security, privacy, and trusted technology practice for EMEA. Previously led PwC’s Risk Services practice across the Middle East and before that was head of Deloitte’s cyber security consultancy in EMEA.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 20 more jobs at NCC Group