Freelance Bug Hunter

ABOUT TRYBER.ME

Tryber.me is a leading crowdtesting platform, owned by UNGUESS S.R.L., that connects companies with cybersecurity professionals to identify and fix vulnerabilities in their digital assets.

UNGUESS is committed to improving the cybersecurity of its clients by harnessing the expertise of its global community of Bug Bounty Hunters, who are registered and hired as freelancers through its crowdtesting platform Tryber.me .

JOB OVERVIEW

We are looking for competent and motivated Bug Bounty Hunters to join our community of freelance testers on Tryber.me.

As a Bug Bounty Hunter on Tryber.me, you will use your cybersecurity expertise to identify vulnerabilities, report them and help UNGUESS client organisations strengthen their security measures. This role is ideal for people who are passionate about cybersecurity, enjoy troubleshooting and are looking for flexible job opportunities.

KEY RESPONSIBILITIES

• Vulnerability Identification: Perform security assessments on web applications, mobile applications, APIs, and other digital assets to identify potential vulnerabilities.
• Reporting: Document and report identified vulnerabilities in a clear, concise, and structured manner using the tryber.me platform. Include steps to reproduce, potential impact, and suggested remediation.
• Collaboration: Work closely with the tryber.me community and the affected organizations to provide detailed insights and guidance on discovered vulnerabilities.
• Continuous Learning: Stay updated with the latest trends, techniques, and tools in cybersecurity to ensure effective and innovative vulnerability detection.
• Compliance: Adhere to the legal and ethical standards of security testing, ensuring that all activities are conducted within the scope of the assigned bug bounty programs.

REQUIRED SKILLS AND QUALIFICATIONS

• Technical Expertise: Strong understanding of various security principles, vulnerabilities (such as OWASP Top 10), and common attack vectors.
• Tools Proficiency: Experience with security testing tools and frameworks such as Burp Suite, OWASP ZAP, Metasploit, Nmap, etc.
• Programming Knowledge: Proficiency in one or more programming/scripting languages (e.g., Python, JavaScript, Bash) to automate tasks and write custom scripts.
• Analytical Skills: Excellent analytical and problem-solving skills with a keen eye for detail.
• Communication Skills: Ability to document and communicate findings effectively, both verbally and in writing.
• Certifications (Preferred): Relevant cybersecurity certifications such as OSCP, CEH, CISSP, etc., are a plus but not mandatory.

BENEFITS:

• Flexibility: Work from anywhere, anytime. Set your own schedule and take on projects that fit your availability.
• Competitive Rewards: Earn competitive rewards for successfully reported vulnerabilities based on their severity and impact.
• Community: Join a community of like-minded cybersecurity professionals, participate in discussions, share knowledge, and grow your network.
• Continuous Learning: Access to resources, webinars, and training sessions to enhance your skills and stay ahead in the field of cybersecurity.

APPLICATION PROCESS:

To apply for the position of Freelance Bug Bounty Hunter on tryber.me, please follow the steps below:

• Registration: create an account on Tryber.me and complete your profile both by entering the required information and by compulsorily reading and accepting the following contractual documents of the Tryber.me platform: Terms & Conditions; Privacy Policy; Code of Ethics . Only by accepting these first contractual documents will you be able to be registered on Tryber.me and use the crowdtesting platform.
• Assessment: participate in an initial assessment to demonstrate your competence and understanding of the security tests.
• Approval: after passing the assessment, you will be approved as a Bug Bounty Hunter on the platform.
• Choice of testing campaign: once you have been approved, you will be a recipient of the testing campaigns published by UNGUESS on the platform and you will be able to decide which of these campaigns to join according to the requirements set out in the campaign itself.
• Engagement: once you have been chosen for the selected campaign, you will have to sign the Integrative Terms , which represent a contractual document supplementary to the documentation accepted during the registration phase and specific to the testing activities commissioned to you through the campaign. In doing so, you will formalise your contractual commitment to perform the activities of the campaign being engaged, thus participating in bug bounty programmes and reporting vulnerabilities.

PROCESSING OF PERSONAL DATA :

UNGUESS will process your personal data in accordance with the applicable legislation and in particular the EU Regulation 2016/679 ("GDPR"). In particular, the processing of your personal data by UNGUESS and the consequent collection of your consent will take place in two specific moments :

• during the phase of registration to the Tryber.me platform, in which UNGUESS will collect your consent by submitting to you the site's Privacy Policy that will cover the processing of your data with reference to the data that you provide for the registration, evaluation, approval and choice of the testing campaign;

• in the phase of execution and commitment to the specific testing activities, in which UNGUESS will collect your further consent by submitting to you the Integrative Terms that integrate the consent obtained with the Privacy Policy of the site and that will cover the processing of your personal data with reference to the performance of the specific testing activities commissioned.

To start the application process, register with Tryber.me by filling out the following form: https://form.jotform.com/220862846345360.

Join tryber.me and become a key player in safeguarding digital landscapes while enjoying the flexibility and rewards of freelance work.

Apply now and start your journey as a Bug Bounty Hunter!