Application Security Engineer II — Scale & Bug Bounty Focus

Bugcrowd Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Bugcrowd is hiring an Application Security Engineer (ASE) to curate and manage incoming vulnerability submissions for major bug bounty programs. You will triage, validate, and classify issues by severity under the Director of Technical Operations.

You’ll work with Bugcrowd’s clients and researchers, escalate high-severity bugs when needed, and bring strong knowledge of OWASP Top Ten vulnerabilities and common testing tools to the table.

Qualifications

• Bachelor’s degree or security consulting experience.
• Published passion for security assessment research.
• Proficient with Burp Suite and Kali Linux, Nmap, SQLMap.

Responsibilities

• Curate and validate incoming vulnerability submissions for Bugcrowd programs.
• Communicate with clients and researchers to obtain missing information.
• Handle incident response by escalating high-severity bugs.
• Maintain knowledge of OWASP Top Ten vulnerabilities.

Skills

OWASP Top Ten vulnerabilities

Scripting language

Education

Bachelor’s degree or security consulting experience

Tools

Burp Suite

Nmap

SQLMap

Kali Linux

Job description

Bugcrowd is hiring an Application Security Engineer (ASE) to curate and manage incoming vulnerability submissions for major bug bounty programs. You will triage, validate, and classify issues by severity under the Director of Technical Operations.

You’ll work with Bugcrowd’s clients and researchers, escalate high-severity bugs when needed, and bring strong knowledge of OWASP Top Ten vulnerabilities and common testing tools to the table.