New Product Security Engineer (Fully Remote)

Bugcrowd Inc.; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Bugcrowd is a preemptive security platform based in San Francisco, unifying exposure discovery, offensive testing, and AI-driven intelligence to help organizations avoid real-world risk. We’re seeking security engineers who move beyond tooling to drive measurable outcomes and shape a culture where security helps others succeed.

You will partner closely with engineering, validate new features, and tune security tooling to reduce noise while delivering meaningful security investments across the

Qualifications

• 3+ years in product or application security.
• Experience reviewing code and building security tooling.
• Proficient in Python/Go/Ruby/Java.

Responsibilities

• Partner with engineering to validate new features and drive security investments.
• Build secure defaults and paved roads to eradicate vulnerability classes.
• Tune SAST/DAST/SCA and secret scanning to reduce noise and focus on what matters.

Skills

Security engineering

Threat modeling

Secure code review

Python

Go

Ruby

Java

Tools

SAST

DAST

SCA

Secret scanning

Job description

• We're looking for security engineers who move beyond standard tooling and drive measurable security outcomes.
• You'll shape a culture where security helps others succeed, not just points out problems.

What You'll Do:

• Partner closely with engineering to validate new features and drive security investment.
• Build secure defaults and paved roads that systematically eradicate vulnerability classes.
• Tune security tooling like SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters.

Who You Are:

• You have 3+ years in product security, application security, or secure software development.
• You can review code, automate tasks, and build security tooling in Python, Go, Ruby, or Java.
• You have hands-on experience with threat modeling, secure code review, and automated testing.

Our Culture:

• We value diversity and inclusion, solving security threats relevant to everyone.
• Our team includes musicians, adventurers, parents, and night owls—a broad range of backgrounds.
• We strive to make Bugcrowd not only a great product but a great place to work.

Bugcrowd

Bugcrowd is a preemptive security platform that unifies exposure discovery and assessment, offensive testing, and AI-driven intelligence to help organizations avoid real-world risk. Founded in 2012 and based in San Francisco, Bugcrowd is a VC-backed company with a diverse, inclusive culture where people feel like family.