Application Security Engineer

1 hour, 49 minutes ago
Mid Level
Cybersecurity
Bugcrowd

Bugcrowd

Bugcrowd provides a crowdsourced cybersecurity platform that connects organizations with elite security researchers to enhance security measures through managed bug bounty programs, penetration testing, and vulnerability disclosure initiatives.

Internet Software & Services
1K-5K
Founded 2012
$79M raised

Description

  • Triage and validate incoming vulnerability submissions for validity, accuracy, and severity.
  • Communicate with clients and researchers to obtain additional information when needed.
  • Manage ongoing assessment services across multiple Bugcrowd programs.
  • Handle incident response by escalating and communicating high-severity vulnerabilities to clients.
  • Apply knowledge of OWASP Top Ten and vulnerabilities such as XSS, SQLi, XXE, IDOR, SSTI, and SSRF.
  • Design or develop scripting and tooling to improve triage and validation processes.
  • Execute individual projects while contributing effectively to the broader team.

Requirements

  • Bachelor’s degree or prior security consulting experience.
  • Published and demonstrated passion for security assessment research.
  • Strong knowledge of OWASP Top Ten vulnerabilities.
  • High proficiency with Burp Suite or another interception proxy.
  • Working experience with industry-standard tools such as Nmap, SQLMap, and Kali Linux tools.
  • Strong proficiency in at least one scripting or development language.
  • Strong organization, communication, and influencing skills.
  • Ability to complete tasks on time and work independently and collaboratively.
  • Ability to maintain strict confidentiality when handling sensitive information.
  • Ability to meet physical requirements, including remaining stationary approximately 50% of the time and carrying a laptop; reasonable accommodations are available.

Benefits

  • 100% remote, work-from-home position.
  • Exposure to security programs across hundreds of companies and technologies, including IoT, embedded systems, mobile applications, and automotive systems.
  • Opportunities to work with leading security researchers and advanced vulnerability-testing methodologies.
  • Inclusive workplace committed to diversity, equal opportunity, and reasonable accommodations.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is hiring a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI/ML security, secure architecture, and assurance practices across the product lifecycle.

CI/CD DevSecOps Encryption Java JavaScript Kubernetes Python SAML Secrets Management TLS
2 hours, 19 minutes ago

Product Security Engineer

Modern Health 251-1K Health Care Providers & Services

Modern Health is hiring a remote Product Security Engineer to strengthen security and compliance across its mental health platform, applications, cloud infrastructure, and software development lifecycle.

Agile AWS Bash CI/CD Cybersecurity Datadog Django Flask GitLab HashiCorp Vault Packer Penetration Testing PostgreSQL Python Redis Terraform
2 days, 2 hours ago

Application Security Engineer - Senior

Banco Plata, S.A., Institución de Banca Múltiple. 1001-5000 Banking / financial services

Plata is seeking an Application Security Engineer to join its Information Security team and embed security controls, testing, and practices throughout the software development lifecycle.

Burp Suite CI/CD Kubernetes Microservices OWASP Penetration Testing
4 days, 2 hours ago

Senior Product Security Engineer

payabl. 51-250 Diversified Financial Services

Payabl is seeking a Senior Product Security Engineer to establish and embed product security across its payments engineering organization, integrating secure practices throughout the software development lifecycle.

AWS CI/CD Penetration Testing
4 days, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers