Application Security Engineer - (5 months Contract)
Job description
An Application Security Engineer at Bugcrowd curates and validates incoming vulnerability submissions for managed bug bounty programs and communicates with clients and researchers. The role involves triage, severity assessment, and incident response for high-severity bugs.
At a glance
- Work mode
- Remote
What you'll do
- Ongoing triage and validation services of Bugcrowd managed programs
- Curate incoming submission data for validity, accuracy, and severity
- Communicate directly with Bugcrowd's clients or researchers when additional information is required
- Handle Incident Response – escalating and communicating about the highest severity bugs to clients
- Assist with the design or development of tooling for improving the triage/validation process
What we're looking for
- Bachelor's degree or previous security consulting experience
- Published and demonstrated passion for security assessment research
- High proficiency with Burp Suite (or any other interception proxy)
- Working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
- Strong knowledge of OWASP Top Ten type vulnerabilities
- Strong skill set in one scripting/development language
- Ability to execute on individual projects but still contribute to the team
- Ability to complete tasks on time
- Strong organization, influencing, and communication skills
Your team
Technical Operations
Under the direction of the Director of Technical Operations
Apply
Direct apply at Bugcrowd
Opens the job posting at Bugcrowd
About Bugcrowd
The preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight
Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches.
Mission
Help organizations avoid, discover, and validate real-world risk
Key facts
- 2012
- San Francisco and New Hampshire
- Security
- Selected as one of "The 10 Coolest Security Startups Of 2016" by crn.com
- Supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others
Partners & customers
What they value
- Diversity in the workplace
- Inclusion
- Feeling like a family