Application Security Engineer
Job description
An Application Security Engineer at Bugcrowd curates and validates incoming security vulnerability submissions for client bug bounty programs and handles incident response for high-severity bugs.
At a glance
- Work mode
- Remote
What you'll do
- Triage and validate incoming vulnerability submissions for validity, accuracy, and severity
- Communicate directly with Bugcrowd's clients or researchers when additional information is required
- Handle incident response by escalating and communicating about the highest severity bugs to clients
- Assist with the design or development of tooling for improving the triage/validation process
What we're looking for
- Bachelor's degree or previous security consulting experience
- Published and demonstrated passion for security assessment research
- High proficiency with Burp Suite (or any other interception proxy)
- Working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
- Strong knowledge of OWASP Top Ten type vulnerabilities
- Strong skill set in one scripting/development language
- Ability to execute on individual projects but still contribute to the team
- Ability to complete tasks on time
- Strong organization, influencing, and communication skills
Your team
Technical Operations
Reports to the Director of Technical Operations
Apply
Direct apply at Bugcrowd
Opens the job posting at Bugcrowd
About Bugcrowd
The preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight
Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches.
Mission
Help organizations avoid, discover, and validate real-world risk so security teams can act first and stay ahead of attackers
Key facts
- 2012
- San Francisco and New Hampshire
- Selected as one of "The 10 Coolest Security Startups Of 2016" by crn.com
- Runs security programs for cars, IoT devices, embedded systems, mobile applications, and more
What they value
- Diversity and inclusion in the workplace
- Feels like a family to customers and researchers