Remote Application Security Engineer — Bug Bounty Triage

VulnU; San Francisco (CA, NH); Hybrid; USD 96,000 - 165,000; Part time

Job summary

Bugcrowd is seeking an Application Security Engineer on a 5-month remote contract. You will curate and validate vulnerability submissions for major client programs, applying OWASP Top Ten knowledge and triage tooling to ensure accuracy and severity.

You’ll interact with clients and researchers, and assist with incident response for high-severity findings. Ideal candidates bring Burp Suite proficiency, security assessment passion, and experience with common security tools, while collaborating

Qualifications

• Bachelor’s degree or prior security consulting experience.
• Published and demonstrated passion for security assessment research.
• High proficiency with Burp Suite and familiarity with industry tools.

Responsibilities

• Triaging and validating incoming vulnerability submissions for accuracy and severity.
• Communicating with Bugcrowd’s clients or researchers when more information is needed.
• Participating in Incident Response by escalating high-severity bugs to clients.
• Applying knowledge of OWASP Top Ten vulnerabilities to triage decisions.
• Developing tooling or scripts to support triage and validation processes.

Skills

OWASP Top Ten knowledge

Scripting language

Strong communication

Security assessment

Education

Bachelor’s degree in security field

Tools

Burp Suite

nmap

sqlmap

Kali Linux

Job description

Bugcrowd is seeking an Application Security Engineer on a 5-month remote contract. You will curate and validate vulnerability submissions for major client programs, applying OWASP Top Ten knowledge and triage tooling to ensure accuracy and severity.

You’ll interact with clients and researchers, and assist with incident response for high-severity findings. Ideal candidates bring Burp Suite proficiency, security assessment passion, and experience with common security tools, while collaborating