Application Security Engineer - Bug Bounty Specialist

Bugcrowd Inc.; United States; A distancia; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Bugcrowd is seeking an Application Security Engineer to curate and manage vulnerability submissions across top programs. You will triage data, assess validity and severity, and communicate with clients and researchers as needed.

You will work with OWASP Top Ten vulnerabilities, scripting, and tooling to improve triage efficiency, with exposure to high-profile bug bounty programs and a fast-paced security environment.

Formación

• Bachelor’s degree or security consulting experience.
• Published security assessment research.
• Proficiency with Burp Suite and common tools (Nmap, SQLMap, Kali Linux).
• Strong knowledge of OWASP Top Ten and incident response.

Responsabilidades

• Triage and validation of Bugcrowd programs, assess validity, accuracy, and severity.
• Communicate with clients or researchers for information; manage incident response for high-severity bugs.
• Work under the Director of Technical Operations and develop tooling for triage/validation.

Conocimientos

Burp Suite

OWASP Top Ten

Incident Response

Scripting language

Security assessment

Security research

Nmap

SQLMap

Kali Linux

Educación

Bachelor’s degree

Herramientas

Burp Suite

Nmap

SQLMap

Kali Linux

Descripción del empleo

Bugcrowd is seeking an Application Security Engineer to curate and manage vulnerability submissions across top programs. You will triage data, assess validity and severity, and communicate with clients and researchers as needed.

You will work with OWASP Top Ten vulnerabilities, scripting, and tooling to improve triage efficiency, with exposure to high-profile bug bounty programs and a fast-paced security environment.