Application Security Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee and manage incoming security vulnerability reports for programs administered by Bugcrowd.

• Assess and validate submissions for their validity, accuracy, and severity.

• Engage directly with Bugcrowd clients or researchers when further information is needed.

• Manage incident responses by escalating and communicating about the most severe vulnerabilities to clients.

• Utilize knowledge of OWASP Top Ten vulnerabilities.

• Employ scripting or development expertise to help design or develop tools that enhance the triage and validation process.

• Operate under the guidance of the Director of Technical Operations.

⛳️ Requirements

• Bachelor's degree or prior experience in security consulting.

• Proven passion for security assessment research demonstrated through publications.

• High proficiency with Burp Suite or another interception proxy tool.

• Practical experience with industry-standard tools such as nmap and sqlmap, along with tools found in Kali Linux.

• Strong understanding of OWASP Top Ten vulnerabilities.

• Proficient in at least one scripting or development language.

• Capability to manage individual projects while also contributing to team efforts.

• Ability to meet deadlines for tasks.

• Excellent organizational, influencing, and communication abilities.

• Capacity to fulfill physical requirements with or without reasonable accommodation.

• Must be able to remain stationary for 50% of the time.

• Required to carry or move a laptop as necessary throughout the workday.

• Integrity to handle highly confidential information.

• Successful background checks may involve Social Security verification, prior employment verification, references, educational verification, and criminal history.

🏝️ Benefits

• Opportunity to engage with security programs for numerous companies.

• Interaction with leading security researchers and advanced security testing methodologies.

• Exposure to security programs encompassing vehicles, IoT devices, embedded systems, mobile applications, and more.

• Team perks available.

• Reasonable accommodations provided for qualified individuals with disabilities.

• Consideration for employment irrespective of protected characteristics.