I'm curious if anyone has found consistent work doing bug bounty's and things like HackerOne to a sufficient degree that it would replace a FT engineer role.
I'd love to hear/learn about someone's experiences if it exists.
I'd love to hear/learn about someone's experiences if it exists.
Not a lot of hackers care about Android app security so there's barely any hackers participating and little competition. Most apps have never had anybody do a security review.
Additionally the scope of the program is so wide that you can look through hundreds of apps from companies that have no security posture at all. Finding bugs is easy and payouts are more than generous.
...which might still be 0.2x of an average Google salary in Mountain View, as noted above.
The fact that you even mention "home country" pretty much requires that you give us specifics if you want us to take the claim seriously.
If you are interested in learning more about SynAck and it's model shoot me an email: i@willcode.it I can try and setup some contacts from their side that are working full time on platforms like it
I would caution anyone thinking about this to do it as a side hustle for at least six months if not a year to test the waters, understand the subculture a bit, and take a few rounds on the roller coaster.
I would say only 10-15% of our reports were from folks in the USA and I don't recall any being full time. The dedicated folks were mostly from eastern europe and middle east...i'm guessing that has changed a bit over the past few years.