Application Security Engineer

2 weeks, 6 days ago
Full-time
Mid Level
Cybersecurity
Bugcrowd

Bugcrowd

Bugcrowd provides a crowdsourced cybersecurity platform that connects organizations with elite security researchers to enhance security measures through managed bug bounty programs, penetration testing, and vulnerability disclosure initiatives.

Internet Software & Services
1K-5K
Founded 2012
$79M raised

Description

  • Triage and validate incoming vulnerability submissions for validity, accuracy, and severity.
  • Communicate with Bugcrowd clients and security researchers to obtain or clarify information.
  • Manage incident response by escalating and communicating critical-severity vulnerabilities to clients.
  • Apply knowledge of OWASP Top Ten and other vulnerability types, including XSS, SQLi, XXE, IDOR, SSTI, and SSRF.
  • Design or develop scripting and tooling to improve the triage and validation process.
  • Execute individual security projects while contributing effectively to the broader team.
  • Work with security programs spanning web applications, mobile applications, IoT, vehicles, and embedded systems.

Requirements

  • Bachelor’s degree or previous security consulting experience.
  • Published and demonstrated passion for security assessment research.
  • High proficiency with Burp Suite or another interception proxy.
  • Working experience with industry-standard security tools such as nmap, sqlmap, and Kali Linux tools.
  • Strong knowledge of OWASP Top Ten vulnerabilities.
  • Strong skills in at least one scripting or development language.
  • Ability to complete tasks on time and manage individual projects.
  • Strong organizational, influencing, and communication skills.
  • Ability to maintain strict confidentiality and pass applicable employment background checks.

Benefits

  • 100% remote, work-from-home environment.
  • Exposure to security programs for potentially hundreds of companies and diverse technologies.
  • Opportunity to work with leading security researchers and advanced testing methodologies.
  • Inclusive workplace committed to diversity, equal employment opportunity, and reasonable accommodations.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Azure Git GitHub
4 hours, 18 minutes ago

Security Engineer II, Application Security

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote U.S.-based Security Engineer II to conduct hands-on application security assessments, discover and validate vulnerabilities, build custom tooling, and deliver actionable findings to clients.

Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
4 hours, 48 minutes ago

Staff Security Engineer [Remote-US]

Quanata 201-500 information technology & services

Quanata, LLC is seeking a Staff Security Engineer to secure AI-enabled systems, applications, cloud infrastructure, and platforms while shaping security standards and initiatives across the organization.

AWS CI/CD Cybersecurity DevSecOps Docker Generative AI GitHub Actions Go Java JavaScript Jenkins Kubernetes Machine Learning Python Secrets Management SIEM Terraform TypeScript
1 day, 4 hours ago

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
6 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers