Bug Bounty Security Researcher
The full posting
About Inspectiv
At Inspectiv, we are dedicated to revolutionizing the landscape of vulnerability management with a unified platform for Bug Bounty as a Service and Pentesting as a Service. Our remote-first team is driven by the vision of providing all the advantages of vulnerability management without the traditional hassle or unpredictable expense. Join us in ensuring our clients that their external attack surface remains impeccably secure and fortified.
We are a well-funded Series A company with top tier investors.
The Opportunity
We are seeking highly skilled and motivated Bug Bounty Security Researchers to join our team. As a Bug Bounty Security Researcher, you will be responsible for identifying and reporting vulnerabilities in software applications, systems, and networks. Your expertise will help us improve the security of our products and services by discovering and mitigating potential threats.
What you will do
- Conduct thorough research on target systems, applications, and networks to identify potential vulnerabilities.
- Develop and execute custom attack vectors using various tools and techniques (e.g., fuzzing, SQL injection, Cross-Site Scripting (XSS), Server-Side-Request-Forgery (SSRF), Remote Code Execution)
- Identify and exploit vulnerabilities in a responsible manner, ensuring that no harm is caused to the system or data being tested.
- Document all findings, including detailed descriptions of discovered vulnerabilities, proof-of-concept code, and steps taken to reproduce the issue.
- Participate in regular bug bounty programs and contribute to the improvement of our products and services.
What we’re looking for
- 1 year of experience in security research, penetration testing, or vulnerability assessment.
- Strong understanding of computer systems, networks, and software applications.
- Some proficiency with programming languages (e.g., Python, C++, JavaScript, HTML) and offensive security tools (e.g., Burp Suite, OWASP ZAP, Nmap, Kali Linux).
- Experience with bug bounty programs and responsible disclosure practices.
- Excellent analytical and problem-solving skills.
- Strong communication and documentation skills.
Preferred Qualifications
- Relevant Application Security Certifications: BurpSuite Certified Practitioner (BSCP), Offensive Security Web Expert (OSWE), GIAC Web Application Penetration Tester (GWAPT), Offensive Security Certified Professional (OSCP)
- 3+ years of experience in security research, penetration testing, or vulnerability assessment.
- Has an awarded and recognized public Bug Bounty profile
- Has recognized contributions to Common Vulnerabilities and Exposures (CVEs)
What We Offer
- Bounty awards for accepted vulnerabilities
- Recognition for submitted reports on various leaderboards on and off platform
- Experience in performing real-world penetration testing in Web Application, Mobile and Network Security
- A collaborative and empathy-led culture that takes security seriously and is on a mission to Secure The Internet
- A chance to participate in private, exclusive bug bounty programs
Compensation: As a remote, freelance security researcher with Inspectiv, you’ll have the flexibility to work on your own schedule while hunting for high-impact vulnerabilities.
Security Researchers submit vulnerability reports via our Bug Bounty platform. We pay upon triage of valid reports that fall within the scope of programs. Payments are made weekly
If you are a motivated and skilled security researcher looking for new challenges, we encourage you to apply!
Where you can be based
This position is 100% remote and open to applicants anywhere in the world.
Text as Inspectiv published it; last compared with the original on 13 Nov 2026.
The application
Just your details.
Taken from Inspectiv's application form as it stood on 13 Nov 2026.
The employer: Inspectiv
Inspectiv runs bug bounty and penetration testing programs as a managed service and is hiring Bug Bounty Security Researchers who can work from any country.
Pay and benefits: Hands-on research role testing client systems, remote from any country.
Other security roles worth a look
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.

Threat Researcher (shows the role here)
Socket · Threat Intel & Research · Remote· 10mo agoDetails
$126,000–$170,000/yr
Application Security Engineer – CVE & Vulnerability Research (shows the role here)
Anyone AI · Offensive Security · Remote· 1mo agoDetails
$65/hr
Applied Security Researcher (shows the role here)
Wiz · Threat Intel & Research · Tel Aviv· 4mo agoDetails

Threat Researcher -Cloud & Endpoint Detection (shows the role here)
Arctic Wolf · SecOps & IR · Bengaluru, IND· 1mo agoDetails

Staff Threat Intelligence Researcher (shows the role here)
Arctic Wolf · Threat Intel & Research · Remote· 2d agoDetails
$86,000–$240,000/yr
A proven pentester or red teamer?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Inspectiv posts a security role
We read Inspectiv's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.