Staff Full-Stack Security Engineer (Secret-Cleared, Hybrid)

VulnU; Huntsville (AL); Hybrid; USD 151,000 - 189,000; Full time

Job summary

Bugcrowd is seeking a Staff Full Stack Engineer in Huntsville, AL to lead architecture and development across the stack. You will build external attack surface management tooling and turn observations into trusted facts for analysts.

The role requires 7+ years of software experience, strong TypeScript/React skills, Next.js familiarity, and an active secret clearance. Hybrid work with onsite requirements is expected.

Qualifications

• 7+ years of software development experience.
• Strong proficiency in TypeScript and modern JavaScript.
• Extensive experience with React and JavaScript web development frameworks (Next.js preferred).
• Familiarity with OAuth2, JWT, and other authentication/authorization frameworks.
• Experience with CI/CD pipelines and cloud deployment platforms (Vercel, AWS, Azure, or GCP).
• Experience with ORM frameworks and relational databases (Prisma, Drizzle, PostgreSQL).
• Excellent debugging, analytical, and problem-solving skills.
• Cybersecurity knowledge, such as how penetration testing, OSINT, and red teaming works.
• Active secret security clearance is required.

Responsibilities

• Lead technical efforts, owning system architecture and development across the stack.
• Build external attack surface management technology and map a target organization from the outside.
• Turn observations into facts, track sources, and document evidence for analysts.
• Create a general framework for passive illumination to streamline future data sources.

Skills

TypeScript

JavaScript

React

Security clearance

CI/CD

Cloud deployment

Debugging

AI/LLM APIs

Tools

Next.js

Prisma

Drizzle

PostgreSQL

AWS

GCP

Azure

Vercel

Job description

Bugcrowd is seeking a Staff Full Stack Engineer in Huntsville, AL to lead architecture and development across the stack. You will build external attack surface management tooling and turn observations into trusted facts for analysts.

The role requires 7+ years of software experience, strong TypeScript/React skills, Next.js familiarity, and an active secret clearance. Hybrid work with onsite requirements is expected.