Remote Product Security Engineer: Build Secure Defaults

Bugcrowd Inc.; San Francisco (CA, NH); Remote; MXN 420,000 - 720,000; Full time

Job summary

Bugcrowd seeks a security engineer who owns problems end to end, shaping security into a default property of our software. You will work with engineering to address risk, improve secure defaults, and strengthen our security tooling and processes.

You will lead end-to-end projects, refine architecture, and push for measurable security outcomes that protect customers while enabling faster product delivery. Remote work is supported.

Qualifications

• 3+ years of experience in product security, application security, or secure software development.
• Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java)
• Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10)
• Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product.
• Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience

Responsibilities

• Partner closely with engineering to refine architecture and drive security investment while prioritizing velocity.
• Build secure defaults and libraries that eradicate classes of vulnerabilities.
• Tune security tooling (SAST, DAST, SCA, secret scanning) to reduce noise and focus on risks.
• Ensure our bug bounty program can be a model for customers and provide feedback on new platform features.
• Own cross-functional security projects from scoping through delivery and communicate risk clearly.
• Use code and automation to scale coverage and improve security across the product

Skills

Python

Go

Ruby

Java

Education

Bachelor's degree in engineering

Bachelor's degree in computer science

Tools

SAST

DAST

SCA

Secret scanning

Job description

Bugcrowd seeks a security engineer who owns problems end to end, shaping security into a default property of our software. You will work with engineering to address risk, improve secure defaults, and strengthen our security tooling and processes.

You will lead end-to-end projects, refine architecture, and push for measurable security outcomes that protect customers while enabling faster product delivery. Remote work is supported.