Remote Application Security Engineer II

OpenKrill; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Bugcrowd is seeking an Application Security Engineer to curate and manage vulnerability submissions for major bug bounty programs. You will work under the Director of Technical Operations to validate data, assess severity, and communicate with clients and researchers to gather details.

The role emphasizes expertise in OWASP Top Ten vulnerabilities and often requires a scripting language to help build tooling that improves triage and validation workflows.

Qualifications

• Bachelor's degree or security consulting experience.
• Published and demonstrated passion for security assessment research.
• High proficiency with Burp Suite (or any other interception proxy) and working knowledge of Nmap, SQLMap, Kali Linux.

Responsibilities

• Ongoing triage and validation of Bugcrowd managed programs.
• Communicate with Bugcrowd's clients or researchers to obtain required information.
• Handle Incident Response—escalating and communicating about highest severity bugs to clients.
• Strong knowledge of OWASP Top Ten vulnerabilities.
• Develop tooling to improve triage/validation processes using scripting languages.

Skills

Communication skills

Team collaboration

Scripting language

Education

Bachelor's degree or security consulting experience

Tools

Burp Suite

Nmap

SQLMap

Kali Linux

Job description

Bugcrowd is seeking an Application Security Engineer to curate and manage vulnerability submissions for major bug bounty programs. You will work under the Director of Technical Operations to validate data, assess severity, and communicate with clients and researchers to gather details.

The role emphasizes expertise in OWASP Top Ten vulnerabilities and often requires a scripting language to help build tooling that improves triage and validation workflows.