Remote opportunity at
BugcrowdApplication Security Engineer
Bugcrowd operates a preemptive security platform that combines human intelligence and artificial intelligence to assist organizations in uncovering, analyzing, and mitigating real-world security risks. Established in…
Career Tools
About This Role
Bugcrowd operates a preemptive security platform that combines human intelligence and artificial intelligence to assist organizations in uncovering, analyzing, and mitigating real-world security risks. Established in 2012, the company maintains a presence in San Francisco and New Hampshire and is backed by prominent investors. As an Application Security Engineer, you will join a remote team handling large-scale security assessments. Reporting to the Director of Technical Operations, you will curate and…
Job Description
Bugcrowd operates a preemptive security platform that combines human intelligence and artificial intelligence to assist organizations in uncovering, analyzing, and mitigating real-world security risks. Established in 2012, the company maintains a presence in San Francisco and New Hampshire and is backed by prominent investors.
As an Application Security Engineer, you will join a remote team handling large-scale security assessments. Reporting to the Director of Technical Operations, you will curate and validate security vulnerability reports submitted to bug bounty programs managed for major global enterprises. This role involves analyzing data for accuracy and severity, interacting directly with corporate clients and security researchers, and managing incident response escalations for critical bugs. You will gain exposure to diverse attack methodologies and specialized security programs covering vehicles, mobile apps, embedded systems, and Internet of Things devices. The position requires strong familiarity with the OWASP Top Ten and at least one scripting or development language to support tooling design.
The role operates entirely from home on a remote basis, with physical requirements that include maintaining a stationary posture half the time and carrying a laptop as needed. Background checks are part of the process due to handling confidential data. Bugcrowd provides equal employment opportunities and considers candidates regardless of protected characteristics.
Responsibilities
- Manage ongoing triage and validation services for Bugcrowd managed programs
- Review incoming vulnerability submissions to determine validity, accuracy, and severity
- Communicate directly with clients and security researchers when additional data is necessary
- Handle incident response by communicating and escalating highest severity bugs to clients
Requirements
- Strong knowledge of OWASP Top Ten vulnerability types
- Proficiency in a scripting or development language for tooling design and process improvement
- High proficiency with Burp Suite or other interception proxies
- Working familiarity with standard industry tools like nmap, sqlmap, and Kali Linux utilities
- Ability to execute individual projects and meet deadlines while contributing to the team
Qualifications
- Bachelor degree or previous security consulting experience
- Published and demonstrated passion for security assessment research
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting explicitly states that the role is 100 percent remote and work-from-home.
What are the primary responsibilities of an Application Security Engineer?
Responsibilities include triaging and validating incoming security vulnerability submissions, assessing their severity and accuracy, communicating with clients and researchers, and handling incident response escalations for critical bugs.
What qualifications are needed for this job?
Candidates need a bachelor degree or prior security consulting experience, strong knowledge of the OWASP Top Ten, proficiency with an interception proxy like Burp Suite, and skill in a scripting language.
Does the posting state the salary range?
No, the salary is not stated in the source posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
Search similar jobs
Related Jobs