Product Security Engineer

This is a fully remote position, open to applicants in Costa Rica.

📋 Description

• Collaborate closely with the engineering team to enhance architecture, validate new features, and promote security investment while maintaining a focus on engineering speed.

• Contribute to establishing secure defaults, libraries, and “paved roads” that systematically eliminate entire classes of vulnerabilities.

• Optimize security tools such as SAST, DAST, SCA, and secret scanning to minimize distractions and concentrate on what truly matters.

• Ensure that Bugcrowd’s bug bounty program serves as a model for other customers.

• Explore innovative methods to harness the creativity of the crowd.

• Provide constructive feedback on new platform features to the engineering and product teams.

• Lead cross-functional product security initiatives from the initial scoping phase through to delivery.

• Shape product and engineering roadmaps.

• Effectively communicate risk assessments to both technical and non-technical stakeholders.

• Utilize code and automation to expand coverage and eliminate repetitive tasks.

• Develop systems based on incentives and accountability instead of bureaucratic processes.

⛳️ Requirements

• A minimum of 3 years of experience in product security, application security, or secure software development.

• Proficiency in reviewing code, automating tasks, and developing security tools in at least one modern programming language, such as Python, Go, Ruby, or Java.

• Hands-on experience with threat modeling, secure code review, and automated testing techniques, including SAST, DAST, and SCA.

• Strong understanding of common vulnerability classes, including the OWASP Top 10.

• Proven ability to manage projects and influence cross-functional collaborators across engineering, DevOps, and product departments.

• A bachelor's degree in engineering, computer science, or a related field, or equivalent practical experience.

• Capability to fulfill all physical requirements with or without reasonable accommodation.

• Ability to remain stationary for 50% of the workday.

• Ability to carry or relocate a laptop as needed throughout the workday.

• Necessary integrity to maintain highly confidential and sensitive information in strict confidence.

• Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history.

🏝️ Benefits

• Fully remote work-from-home arrangement.

• Reasonable accommodations available for qualified individuals with disabilities.

• Employment benefits and privileges (specific details not provided).