Remote Product Security Engineer - End-to-End Security

Bugcrowd Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Bugcrowd is looking for security engineers who own problems end to end, help make security a default property of everything we build, and work closely with engineering. You will shape a culture where security enables teams to succeed, not just point out problems.

In this role, you will partner with product and engineering to refine architecture, drive secure defaults, and tune tools (SAST/DAST/SCA) to focus on real risk.

Qualifications

• 3+ years in product security, application security, or secure software development.
• Ability to review code, automate tasks, and build security tooling in at least one modern language.
• Experience with threat modeling, secure code review, and automated testing (SAST/DAST/SCA).

Responsibilities

• Partner closely with engineering to refine architecture and drive security investment.
• Contribute to secure defaults and libraries to reduce vulnerabilities.
• Tune security tooling (SAST/DAST/SCA) to reduce noise and focus on key issues.
• Support Bugcrowd's bug bounty program and provide feedback on platform features.
• Lead cross‑functional security projects from scoping to delivery.
• Scale coverage using automation and secure‑by‑default practices.

Skills

Threat modeling

Secure code review

SAST/DAST/SCA

Automated testing

Programming languages

Education

Bachelor's degree in engineering/CS

Tools

AWS

GCP

Kubernetes

Docker

Terraform

Job description

Bugcrowd is looking for security engineers who own problems end to end, help make security a default property of everything we build, and work closely with engineering. You will shape a culture where security enables teams to succeed, not just point out problems.

In this role, you will partner with product and engineering to refine architecture, drive secure defaults, and tune tools (SAST/DAST/SCA) to focus on real risk.