Application Security Engineer - (5 months Contract)

Overview

Application Security Engineer on a 5-month contract, curating and managing incoming security vulnerability submissions to bug bounty programs for Bugcrowd's clients.

What you'll do

• Triage and validate submissions on Bugcrowd managed programs for validity, accuracy and severity, under the direction of the Director of Technical Operations.
• Communicate directly with Bugcrowd's clients or researchers when additional information is required.
• Handle incident response by escalating and communicating about the highest severity bugs to clients.
• Assist with the design or development of tooling to improve the triage and validation process.

What you'll need

• Bachelor's degree or previous security consulting experience.
• Published and demonstrated passion for security assessment research.
• High proficiency with Burp Suite (or any other interception proxy).
• Working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux).
• Strong knowledge of OWASP Top Ten type vulnerabilities.
• Ability to execute on individual projects but still contribute to the team.
• Ability to complete tasks on time.
• Strong organization, influencing, and communication skills.

Details

• Location: Remote, work-from-home 100% of the time.
• Physical requirements: able to remain stationary 50% of the time and carry or move a laptop as needed.
• Position has access to highly confidential information; background checks may be conducted.