Application Security Engineer

Overview

Application Security Engineer (ASE) role curating and managing incoming security vulnerability submissions to bug bounty programs run by Bugcrowd for large companies.

What you'll do

• Triage and validate submissions on Bugcrowd managed programs under the direction of the Director of Technical Operations.
• Curate submission data for validity, accuracy and severity.
• Communicate directly with Bugcrowd's clients or researchers when additional information is required.
• Handle Incident Response, escalating and communicating about the highest severity bugs to clients.
• Assist with the design or development of tooling to improve the triage and validation process.

What you'll need

• Bachelor's degree or previous security consulting experience.
• Published and demonstrated passion for security assessment research.
• Strong knowledge of OWASP Top Ten type vulnerabilities.
• High proficiency with Burp Suite (or any other interception proxy).
• Working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux).
• Ability to execute on individual projects while still contributing to the team.
• Ability to complete tasks on time.
• Strong organization, influencing, and communication skills.

Nice to have

• Strong skill set in one scripting or development language.

Details

• Remote, work-from-home 100% of the time.
• Sitting and/or standing: must be able to remain in a stationary position 50% of the time.
• Carrying and/or lifting: must be able to carry or move a laptop as needed throughout the work day.
• Position has access to highly confidential, sensitive information; background checks may be conducted.