Application Security Engineer II

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee the curation and management of incoming security vulnerability submissions for Bugcrowd's bug bounty programs.

• Assess and validate submissions for their validity, accuracy, and severity.

• Engage directly with Bugcrowd clients or security researchers when further information is necessary.

• Manage incident response by escalating and communicating about the most critical vulnerabilities to clients.

• Utilize knowledge of OWASP Top Ten vulnerabilities.

• Employ scripting or development skills to help design or develop tools that enhance the triage and validation process.

• Report directly to the Director of Technical Operations.

⛳️ Requirements

• A Bachelor’s degree or prior experience in security consulting.

• A published and demonstrated enthusiasm for security assessment research.

• High proficiency in Burp Suite or another interception proxy.

• Working-level experience with industry-standard tools, such as nmap and sqlmap, along with tools found in Kali Linux.

• In-depth knowledge of OWASP Top Ten vulnerabilities.

• Strong competency in at least one scripting or development language.

• Capability to manage individual projects while also contributing to team efforts.

• Ability to complete tasks within designated timelines.

• Excellent organizational, influencing, and communication skills.

• Capacity to fulfill all physical requirements with or without reasonable accommodations.

• Must be capable of remaining in a stationary position for 50% of the time.

• Must be able to carry or move a laptop as required throughout the workday.

• Necessary integrity to maintain confidential information with the utmost discretion.

• Subject to employment background checks.

🏝️ Benefits

• Opportunity to engage with security programs for numerous companies and a variety of technologies.

• Access to elite security researchers and advanced security testing methodologies.

• Opportunities for learning and professional development.

• Team perks.

• Reasonable accommodations for qualified individuals with disabilities.