You need to make research to know whether a bounty manager is legit or not, but I can say that a newbie bounty manager will still be legit just look at the project and also join their bounty telegram group and see how the bounty manager responds to the participants.