Remote opportunity at
BugcrowdApplication Security Engineer II (Contract - 5 months )
Bugcrowd is currently hiring an Application Security Engineer II for a five-month contract position. Operating as a remote, work-from-home role 100 percent of the time, this…
Career Tools
About This Role
Bugcrowd is currently hiring an Application Security Engineer II for a five-month contract position. Operating as a remote, work-from-home role 100 percent of the time, this position involves handling application security assessments at scale and managing incoming security vulnerability submissions for bug bounty programs. Professionals in this role evaluate reports for accuracy, severity, and validity, while interacting directly with researchers and clients. The organization combines artificial intelligence and human insight…
Job Description
Bugcrowd is currently hiring an Application Security Engineer II for a five-month contract position. Operating as a remote, work-from-home role 100 percent of the time, this position involves handling application security assessments at scale and managing incoming security vulnerability submissions for bug bounty programs. Professionals in this role evaluate reports for accuracy, severity, and validity, while interacting directly with researchers and clients.
The organization combines artificial intelligence and human insight to deliver a preemptive security platform that helps companies detect, assess, and mitigate real-world risks. Employees gain exposure to advanced security testing methodologies across various environments, including mobile applications, internet-of-things devices, embedded systems, and vehicles. Candidates should possess high proficiency with interception proxies and a strong understanding of security vulnerabilities.
Responsibilities
- Manage ongoing triage and validation services for programs managed by the company
- Review incoming vulnerability submissions to determine validity, accuracy, and severity
- Communicate directly with clients and researchers when extra information is needed
- Handle incident response by escalating and communicating high-severity bugs to clients
- Design or build tooling to enhance the triage and validation workflow
Requirements
- Strong knowledge of OWASP Top Ten vulnerability types
- Proficiency in at least one scripting or development language
- High proficiency with Burp Suite or another interception proxy
- Working familiarity with standard industry tools like nmap, sqlmap, and Kali Linux utilities
- Ability to complete assigned tasks on time and execute individual projects while contributing to a team
- Strong communication, organization, and influencing skills
Qualifications
- Hold a Bachelor's degree or have previous security consulting experience
- Demonstrated passion and published history in security assessment research
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the role is remote and work-from-home 100 percent of the time.
What is the employment type and duration?
This is a full-time contract position lasting for five months.
What salary does Bugcrowd offer for this role?
The source posting does not specify the salary for this position.
What are the core duties of this role?
The engineer will curate and validate incoming vulnerability submissions, communicate with clients and researchers, handle incident response for high-severity bugs, and potentially build internal tooling.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.