Application Security Engineer - (5 months Contract)

Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers.

Job Summary

At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions to some of the world’s biggest companies’ bug bounty programs.

Essential Duties & Responsibilities

• Responsible for the ongoing triage and validation services of Bugcrowd managed programs under the direction of the Director of Technical Operations.
• Take incoming submission data and curate it for validity, accuracy, and severity.
• Communicate directly with Bugcrowd’s clients or researchers when additional information is required.
• Handle Incident Response – escalating and communicating about the highest severity bugs to clients.
• Apply strong knowledge of OWASP Top Ten type vulnerabilities.
• Utilize scripting/development languages to assist with the design or development of tooling for improving the triage/validation process.

Education, Experience, Skills, & Abilities

• Bachelor’s degree or previous security consulting experience
• Published and demonstrated passion for security assessment research
• High proficiency with Burp Suite (or any other interception proxy) and a working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
• Ability to execute on individual projects but still contribute to the team
• Ability to complete tasks on time
• Strong organization, influencing, and communication skills

Working Conditions

• Sitting and/or standing - Must be able to remain in a stationary position 50% of the time
• Carrying and /or lifting - Must be able to carry / move laptop as needed throughout the work day
• Environment: Remote, work-from-home 100% of the time