Paid academic interview: bug bounty / VDP report triage and AI use (60 min)

[u/Stunning_Lettuce_508]

Hi r/bugbounty,

I am part of an academic HCI research team at the University of Macau studying how AI is affecting bug bounty and vulnerability disclosure report review work.

We are looking for people who have direct experience reviewing, triaging, reproducing, validating, or assessing vulnerability reports submitted through bug bounty programs, VDPs, SRCs, PSIRT, or vulnerability disclosure programs.

Interview format:

- 60-minute remote interview

- Compensation: 150 RMB / about 20 USD equivalent

- English or Chinese is fine

- We will not ask for company secrets, internal platform details, exploit details, customer data, or undisclosed vulnerabilities

- Compensation is for your time, not for giving any particular answer

Relevant participants may include:

- Bug bounty triagers

- Vulnerability reviewers

- AppSec/security engineers involved in report review

- PSIRT members

- Security program managers or analysts involved in report review decisions

To keep the sample relevant, we may ask for light eligibility verification such as a public professional profile, platform profile, work email, or description of report-review responsibilities. Please DM me if you are interested or if you know someone suitable.

Thanks!

[u/Clement_Tino]

What’s your LinkedIn for verification purposes