Application Security Engineer II (Contract - 5 months )

Overview

Contract Application Security Engineer II role curating and triaging vulnerability submissions for Bugcrowd managed bug bounty programs, with incident response escalation for the highest severity bugs.

What you'll do

• Triage and validate incoming security vulnerability submissions for validity, accuracy and severity under the direction of the Director of Technical Operations.
• Communicate directly with Bugcrowd's clients or researchers when additional information is required.
• Handle incident response by escalating and communicating about the highest severity bugs to clients.
• Assist with the design or development of tooling to improve the triage and validation process.

What you'll need

• Bachelor's degree or previous security consulting experience.
• Strong knowledge of OWASP Top Ten type vulnerabilities.
• Published and demonstrated passion for security assessment research.
• High proficiency with Burp Suite (or any other interception proxy).
• Working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux).
• Ability to execute on individual projects while still contributing to the team.
• Ability to complete tasks on time.
• Strong organization, influencing and communication skills.

Nice to have

• Strong skill set in one scripting or development language.

Details

• Remote, work-from-home 100% of the time.
• Sitting and/or standing, remaining stationary 50% of the time.
• Ability to carry or move a laptop as needed throughout the work day.
• Contract engagement of 5 months.
• Subject to background checks for positions involving confidential or proprietary information.