Product Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Enhance architecture, validate new functionalities, and promote security investments while maintaining engineering efficiency.

• Contribute to secure defaults, libraries, and security "paved roads" that eliminate entire categories of vulnerabilities.

• Adjust SAST, DAST, SCA, and secret-scanning tools to minimize noise and concentrate on significant risks.

• Ensure Bugcrowd’s bug bounty program can serve as a benchmark for customers.

• Explore innovative methods to harness the creativity of the crowd.

• Provide insights on new platform features to engineering and product teams.

• Lead cross-functional product security initiatives from planning to execution.

• Influence product and engineering roadmaps while communicating risks to both technical and non-technical stakeholders.

• Utilize code and automation to expand coverage and eliminate repetitive tasks.

• Create systems based on incentives and accountability instead of bureaucratic processes.

⛳️ Requirements

• Over 3 years of experience in product security, application security, or secure software development.

• Capability to review code, automate processes, and develop security tools in at least one modern programming language, such as Python, Go, Ruby, or Java.

• Practical experience with threat modeling, secure code review, and automated testing (SAST, DAST, SCA).

• Strong understanding of common vulnerability types, including the OWASP Top 10.

• Proven ability to manage projects and influence cross-functional collaborators across engineering, DevOps, and product teams.

• Bachelor’s degree in engineering, computer science, or a related field, or equivalent practical experience.

• Must be able to remain stationary for 50% of the time.

• Must be able to carry/move a laptop as necessary throughout the workday.

• Must possess the integrity required to maintain confidential information with the utmost discretion.

• Must pass background checks for employment purposes.

🏝️ Benefits

• Fully remote work-from-home opportunity 100% of the time.

• Reasonable accommodations available for individuals with disabilities.

• Employment benefits and privileges (specific benefits not detailed).