Application Security Engineer II – Contract, 6 months

🔥 3 minutes ago

🇮🇳 India – Remote

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bugcrowd

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

💼 Consulting

🏥 Healthcare

📦 Logistics

💰 $30M Series D on 2020-04

Consulting • Healthcare • Logistics

Bugcrowd is a leading platform that provides continuous security testing solutions, enabling organizations to stay ahead of cyberthreats. By leveraging a global community of trusted security researchers, Bugcrowd offers services such as penetration testing as a service, vulnerability disclosure, bug bounty programs, and attack surface management. The company assists industries such as financial services, healthcare, and technology in identifying and prioritizing vulnerabilities, ensuring proactive protection against potential cyber attacks. Driven by data and AI, Bugcrowd's comprehensive approach integrates seamlessly with existing systems to streamline the remediation of security issues, enhancing the overall security posture of its clients.

📋 Description

• Curate and manage incoming security vulnerability submissions for Bugcrowd-managed bug bounty programs • Triage and validate submissions for validity, accuracy, and severity • Communicate directly with clients or researchers when additional information is required • Handle incident response by escalating and communicating about highest-severity bugs to clients • Apply strong knowledge of OWASP Top Ten vulnerabilities • Assist with the design or development of tooling to improve the triage and validation process • Work under the direction of the Director of Technical Operations

🎯 Requirements

• Bachelor’s degree or previous security consulting experience • Published and demonstrated passion for security assessment research • High proficiency with Burp Suite or another interception proxy • Working-level experience with industry-standard tools such as nmap, sqlmap, and tools included in Kali Linux • Strong knowledge of OWASP Top Ten vulnerabilities • Strong skill set in one scripting or development language • Ability to execute individual projects while contributing to the team • Ability to complete tasks on time • Strong organization, influencing, and communication skills • Ability to complete all physical requirements with or without reasonable accommodation • Must be able to remain in a stationary position 50% of the time • Must be able to carry or move a laptop as needed throughout the workday • Applicant must possess the integrity to maintain confidential information strictly confidential • Background checks may include Social Security verification, prior employment verification, references, educational verification, and criminal history

🏖️ Benefits

• Exposure to security programs for hundreds of companies and diverse technologies • Exposure to Internet security researchers and cutting-edge security testing methodologies • Learning opportunities across XSS, SQLi, XXE, IDOR, SSTI, SSRF, and other vulnerability types • Exposure to security programs involving cars, IoT devices, embedded systems, mobile applications, and more • Reasonable accommodations for qualified individuals with disabilities