Application Security Engineer

Overview

Manage application security vulnerability submissions for Bugcrowd’s client bug bounty programs, validating findings, assessing severity, and coordinating with clients and researchers.

What you'll do

• Triage incoming security vulnerability submissions.
• Validate submission accuracy and severity.
• Communicate with clients when additional information is needed.
• Communicate with security researchers when additional information is needed.
• Escalate and communicate about highest-severity bugs through incident response.
• Support tooling design or development to improve triage and validation.

What you'll need

• Hold a bachelor’s degree or have previous security consulting experience.
• Demonstrate a published and sustained interest in security assessment research.
• Have strong knowledge of OWASP Top Ten vulnerabilities.
• Show high proficiency with Burp Suite or another interception proxy.
• Have working experience with industry-standard tools such as nmap, sqlmap, or Kali Linux tools.
• Communicate and organize work effectively while completing tasks on time.

Details

• Remote work from home 100% of the time.
• Location: Brazil.