Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, and severity; communicate with clients and security researchers; escalate critical vulnerabilities through incident response; and contribute to tooling that improves the triage and validation process. The role requires strong application security knowledge, especially OWASP Top Ten vulnerabilities, and proficiency with security testing tools.

Lead and run vulnerability management and other security programs, drive metrics and accountability, coordinate cross-functional engineering and product teams, improve program practices and tools, and support security leadership with business operations.