Application Security Engineer • Mid-Level

Who you are

You have a strong background in application security, with experience in managing security vulnerability submissions and a deep understanding of various security testing methodologies. You are familiar with common vulnerabilities such as XSS, SQLi, XXE, IDOR, SSTI, and SSRF, and you understand how to assess and mitigate these risks effectively. Your technical fluency allows you to communicate complex security concepts clearly to both technical and non-technical stakeholders. You thrive in a collaborative environment, working alongside elite security researchers and hackers to enhance security programs for some of the world's largest companies. You are detail-oriented and possess a proactive mindset, always looking for ways to improve security processes and outcomes.

Desirable

Experience with bug bounty programs or crowdsourced security initiatives is a plus. Familiarity with security tools such as Burp Suite and knowledge of OWASP guidelines will enhance your effectiveness in this role. You are adaptable and eager to learn, keeping up with the latest trends and threats in the cybersecurity landscape.

What you'll do

As an Application Security Engineer at Bugcrowd, you will curate and manage incoming security vulnerability submissions, ensuring they are assessed and addressed promptly. You will collaborate with a diverse team of security experts and hackers, leveraging their insights to improve security assessments and methodologies. Your role will involve analyzing vulnerabilities, providing actionable feedback to clients, and helping to shape the security posture of major organizations. You will also participate in the development of security testing frameworks and contribute to the continuous improvement of Bugcrowd's security knowledge platform. Your work will directly impact the effectiveness of security programs and the safety of client applications.

What we offer

At Bugcrowd, you will be part of a mission-driven team that is redefining the landscape of application security. We offer a flexible remote work environment, competitive compensation, and opportunities for professional growth. You will have access to cutting-edge tools and resources, enabling you to stay at the forefront of the cybersecurity field. Join us in our mission to empower organizations to take control of their security and outpace threat actors.