Remote opportunity at
BugcrowdApplication Security Engineer - (5 months Contract)
Bugcrowd is currently hiring an Application Security Engineer for a five-month contract position. Operating as a preemptive security platform, the company unifies exposure discovery, offensive testing,…
Career Tools
About This Role
Bugcrowd is currently hiring an Application Security Engineer for a five-month contract position. Operating as a preemptive security platform, the company unifies exposure discovery, offensive testing, and artificial intelligence-driven intelligence to assist organizations in avoiding and validating real-world risks. In this role, the professional will review and oversee incoming vulnerability reports submitted to bug bounty programs run for major global enterprises. Working under the Director of Technical Operations, the contractor…
Job Description
Bugcrowd is currently hiring an Application Security Engineer for a five-month contract position. Operating as a preemptive security platform, the company unifies exposure discovery, offensive testing, and artificial intelligence-driven intelligence to assist organizations in avoiding and validating real-world risks. In this role, the professional will review and oversee incoming vulnerability reports submitted to bug bounty programs run for major global enterprises. Working under the Director of Technical Operations, the contractor will evaluate these submissions for accuracy, severity, and validity, while communicating with clients and researchers when necessary. Additionally, the role involves managing incident response by escalating critical bugs to clients. This position exposes team members to diverse testing targets such as IoT devices, connected cars, mobile apps, and embedded systems, while working with cutting-edge testing techniques.
Responsibilities
- Perform ongoing triage and validation services for managed security programs
- Review incoming vulnerability data for validity, severity, and accuracy
- Communicate directly with clients and researchers to gather missing information
- Handle incident response by escalating and communicating high-severity bugs to clients
Requirements
- Strong knowledge of OWASP Top Ten vulnerabilities
- Proficiency in at least one scripting or development language for tooling design
- High proficiency with Burp Suite or similar interception proxies
- Working familiarity with industry-standard tools like nmap, sqlmap, and Kali Linux utilities
- Ability to execute individual tasks and projects while collaborating with a team
- Strong organizational, communication, and influencing skills
- Capability to fulfill physical requirements such as stationary sitting or standing, and carrying a laptop
Qualifications
- Hold a Bachelor’s degree or possess previous security consulting experience
- Demonstrated and published passion for security assessment research
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
This position is a contract role lasting for 5 months.
Is this position remote?
Yes, the work environment is 100 percent remote and work-from-home.
What is the salary for this position?
The salary and compensation details are not specified in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.