Application Security Engineer II (Contract - 5 months )
Job description
An Application Security Engineer at Bugcrowd curates and validates incoming vulnerability submissions for client bug bounty programs and handles incident response for high-severity bugs. The role is aimed at security professionals looking to advance their skills across many companies' security programs.
At a glance
- Work mode
- Remote
What you'll do
- Ongoing triage and validation services of Bugcrowd managed programs
- Take incoming submission data and curate it for validity, accuracy, and severity
- Communicate directly with Bugcrowd's clients or researchers when additional information is required
- Handle Incident Response – escalating and communicating about the highest severity bugs to clients
- Assist with the design or development of tooling for improving the triage/validation process
What we're looking for
- Bachelor's degree or previous security consulting experience
- Published and demonstrated passion for security assessment research
- High proficiency with Burp Suite (or any other interception proxy)
- Working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
- Strong knowledge of OWASP Top Ten type vulnerabilities
- Strong skill set in one scripting/development language
- Ability to execute on individual projects but still contribute to the team
- Ability to complete tasks on time
- Strong organization, influencing, and communication skills
Your team
Technical Operations
Under the direction of the Director of Technical Operations
Apply
Direct apply at Bugcrowd
Opens the job posting at Bugcrowd
About Bugcrowd
The preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight
Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire.
Mission
Help organizations avoid, discover, and validate real-world risk
Key facts
- 2012
- San Francisco and New Hampshire
- Security
- Selected as one of "The 10 Coolest Security Startups Of 2016" by crn.com
- Supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others
- Runs security programs for cars, IoT devices, embedded systems, mobile applications, and more
Partners & customers
What they value
- Diversity in the workplace
- Inclusion
- Feels like a family