Together at Hackrate

Ethical Hacker

Hackrate is a Hungarian cybersecurity company specializing in penetration testing, bug bounty programs and vulnerability disclosure programs. We operate our own Ethical Hacking Platform and work with organizations across Europe.

We are looking for one or two Ethical Hackers to join our team and work closely with our Head of Ethical Hacking Services.

This is a hands-on technical role combining penetration testing with the day-to-day technical operation of bug bounty programs.

What you will do:

Bug bounty program operations

A significant part of the role is managing the day-to-day technical operation of our customers' bug bounty programs.

Your responsibilities will include:

• Reviewing vulnerability reports submitted by ethical hackers.
• Reproducing and validating reported vulnerabilities.
• Identifying valid findings, duplicates, invalid reports and known issues.
• Assessing severity and real technical impact.
• Requesting additional information from researchers when necessary.
• Communicating with ethical hackers about their reports.
• Supporting customers with technical questions related to reported vulnerabilities.
• Escalating complex cases to the Head of Ethical Hacking Services.
• Helping ensure consistent vulnerability handling across our programs.

The Head of Ethical Hacking Services will be available for complex cases, but you must be comfortable handling normal vulnerability reports and technical decisions independently.

Penetration testing

• Perform penetration tests primarily on web applications and APIs.
• Independently manage smaller and less complex penetration testing projects from preparation through testing and reporting.
• Review the scope, testing environment, documentation and test accounts before starting an assessment.
• Assess the technical impact and severity of findings.
• Write clear vulnerability descriptions, reproduction steps and remediation recommendations.
• Prepare professional penetration testing reports.
• Perform retesting when required.
• Communicate directly with customers regarding technical questions during projects.

For larger or more complex projects, you will work together with the Head of Ethical Hacking Services and other members of the team.

How we work:

You will work closely with our Head of Ethical Hacking Services.

You will have support for complex technical cases, larger penetration testing projects and difficult bug bounty decisions. However, we are looking for someone who can take ownership of smaller penetration testing projects and day-to-day vulnerability report handling independently.

The role provides hands-on experience with both traditional penetration testing and continuous security testing through active bug bounty programs.

Requirements:

Previous hands-on bug bounty experience is mandatory for this position. You should have practical experience finding and reporting vulnerabilities through bug bounty or vulnerability disclosure programs.

Please include a link to your bug hunter profile with your CV, for example from Hackrate, HackerOne, Bugcrowd, Intigriti, YesWeHack or another relevant platform.

Technical requirements

• Practical penetration testing experience.
• Strong understanding of common web application and API vulnerabilities.
• Good knowledge of OWASP testing methodologies and common vulnerability classes.
• Ability to manually reproduce and validate vulnerabilities.
• Ability to assess the real security impact of a vulnerability.
• Ability to manage smaller penetration testing projects independently.
• Clear and structured technical writing.
• Ability to communicate professionally with customers and ethical hackers.
• Ability to work independently and take responsibility for assigned projects and vulnerability reports.

Other requirements

• Hungarian language proficiency is required.
• You must be legally eligible to work in Hungary.
• You must be able to work from our Budapest office at least once per week.
• More frequent office presence will be required during the onboarding period.

Strong advantages

The following are valuable but not required:

• OSCP or another relevant offensive security certification.
• Experience with mobile application penetration testing.
• Experience with infrastructure or cloud penetration testing.
• Previous experience with vulnerability triage or managing bug bounty programs.
• Experience communicating directly with customers during penetration testing projects.
• Strong public bug bounty track record.

Apply now

You can apply to this position by sending your CV and bug hunter profile link to [email protected].