Security Analyst

Job not on LinkedIn

🕒 August 21

🇺🇸 United States – Remote

💵 $130k - $160k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔐 Security Analyst

🚫👨‍🎓 No degree required

👻 Ghost score 30%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

RunSybil

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

RunSybil is an AI-powered offensive security platform that continuously tests applications and infrastructure for exploitable vulnerabilities by reasoning about systems the way an elite human researcher would, operating across the entire stack on every deployment. The company emphasizes automated, continuous offensive testing to find real-world exploitable issues; public materials note a $40M raise led by Khosla Ventures.

📋 Description

• Assess and validate web application vulnerabilities across a range of targets and confirm exploitability and scope • Reproduce findings hands-on using tools like Burp Suite • Rate severity accurately using established frameworks such as CVSS and OWASP • Write clear, accurate, customer-facing finding descriptions and remediation guidance • Maintain consistent standards across a high volume of findings • Surface patterns, edge cases, and unusual behaviors to the broader team • Identify patterns across findings and share feedback on where and how Sybil can improve

🎯 Requirements

• 2 or more years of hands-on experience with web application vulnerabilities through bug bounty, penetration testing, application security, or a similar role • Solid, practical understanding of OWASP Top 10 and common web vulnerability classes • Experience reproducing and validating findings manually, including in ambiguous or noisy environments • Comfort with tools like Burp Suite, browser developer tools, or similar for hands-on verification • Strong written communication and ability to describe vulnerabilities, impacts, and remediation in plain language • Attention to detail and consistency • Self-direction and ability to manage work independently • Legally authorized to work in the United States • Must not require sponsorship for employment visa status currently or in the future

🏖️ Benefits

• Meaningful equity • Ownership in what we're building