Security Analyst

Responsibilities

• Respond to and triage alerts relating to phishing attacks, impersonation, scams, and brand abuse (e.g. Sublime, Doppel), escalating credible threats where appropriate.
• Coordinate day-to-day operation of the bug bounty program, including communication with researchers, issue tracking, reporting, and internal follow-up.
• Conduct user access reviews and review security settings, access configurations, and administrative controls across business systems, SaaS platforms, and internal infrastructure, tracking remediation where required.
• Support recurring operational security workflows, including documentation, process tracking, and follow-up.

Requirements

• 2+ years of experience in a security-focused role, such as security operations, IAM, application security support, operational security, or a similar domain.
• Familiarity with core security concepts including phishing, authentication, access control, least privilege, and common vulnerability classes.
• Ability to manage multiple concurrent workflows with strong attention to detail and reliable follow-through.
• Clear written communication and confidence coordinating across technical and non-technical stakeholders.
• Self-motivated, organized, and comfortable operating independently in a remote-first environment with minimal supervision.

Nice to Have

• Experience automating operational workflows using LLMs or AI tooling (e.g. Claude).
• Familiarity with common web application vulnerabilities (e.g. OWASP Top 10).
• Exposure to vulnerability disclosure / bug bounty workflows.
• Experience with SaaS administration, access reviews, or IAM processes.
• Experience in web3 environments or familiarity with common web3 threat patterns.