RemoteLeaf Logo
Log in Sign up

Product Security Engineer

2 days, 22 hours ago
Costa Rica
Full-time
Mid Level
Application Security Engineer
Cybersecurity
AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
Apply Now
Bugcrowd

Bugcrowd

Bugcrowd provides a crowdsourced cybersecurity platform that connects organizations with elite security researchers to enhance security measures through managed bug bounty programs, penetration testing, and vulnerability disclosure initiatives.

Internet Software & Services
1K-5K
Founded 2012
$79M raised
View All Jobs 8

Description

  • Partner with engineering to refine architecture, validate features, and prioritize security investments.
  • Build secure defaults, libraries, and internal “paved roads” that prevent entire vulnerability classes.
  • Tune SAST, DAST, SCA, secret scanning, and other security tooling to reduce noise and improve feedback.
  • Operate and improve Bugcrowd’s bug bounty program while providing feedback on platform features.
  • Lead cross-functional product security projects from scoping through delivery.
  • Communicate security risks to technical and non-technical stakeholders and influence product and engineering roadmaps.
  • Use code and automation to expand security coverage and eliminate repetitive work.

Requirements

  • 3+ years of experience in product security, application security, or secure software development.
  • Ability to review code, automate tasks, and build security tooling in Python, Go, Ruby, Java, or another modern programming language.
  • Hands-on experience with threat modeling, secure code review, SAST, DAST, SCA, and common vulnerability classes such as the OWASP Top 10.
  • Experience managing projects and influencing partners across engineering, DevOps, and product.
  • Bachelor’s degree in engineering, computer science, or a related field, or equivalent practical experience.
  • Experience with bug bounty or vulnerability disclosure programs (preferred).
  • Experience building secure-by-default libraries or security paved roads (preferred).
  • Experience securing cloud-native platforms and infrastructure as code, including Terraform, AWS, GCP, Kubernetes, or Docker (preferred).
  • Ability to maintain strict confidentiality and pass applicable employment background checks.
  • Ability to work remotely and remain stationary for approximately 50% of the workday.

Benefits

  • 100% remote, work-from-home position.
  • Reasonable accommodations for qualified individuals with disabilities.
  • Inclusive, equal-opportunity workplace with emphasis on diverse perspectives.
  • Eligibility for employment benefits and privileges, as applicable.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cleo

Staff Application & Product Security Engineer

Cleo 251-1K Internet Software & Services

Cleo is hiring a Staff Application Security Engineer to own secure product development and the security posture of its SaaS and customer-hosted products, partnering with engineering and security teams from design through release.

United States Full-time Lead Application Security Engineer
$160k-$180k
AWS Burp Suite CI/CD GitHub Go Java Jenkins Kubernetes Penetration Testing Python SAML Terraform TypeScript
2 days, 23 hours ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is seeking a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI/ML security, secure architecture, and assurance practices throughout product development.

Canada Full-time Senior Application Security Engineer
$118k-$162k
CI/CD DevSecOps Java JavaScript Kubernetes OpenID Connect Python SAML Secrets Management TLS
1 week, 3 days ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is seeking a Senior Product Security Engineer to secure its AI-native platform by embedding AI, application, cloud, and customer assurance controls throughout the product lifecycle.

United Kingdom Full-time Senior Application Security Engineer
$114k-$155k
CI/CD DevSecOps Encryption Java JavaScript Kubernetes OpenID Connect Python SAML Secrets Management TLS
1 week, 3 days ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is seeking a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI, application, cloud, and customer assurance security throughout the product lifecycle.

Ireland Full-time Senior Application Security Engineer
$111k-$152k
CI/CD DevSecOps Encryption Java JavaScript Kubernetes OpenID Connect Python SAML Secrets Management TLS
1 week, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers