Product Security Engineer

🔥 2 hours ago

🇨🇷 Costa Rica – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bugcrowd

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

💼 Consulting

🏥 Healthcare

📦 Logistics

💰 $30M Series D on 2020-04

Consulting • Healthcare • Logistics

Bugcrowd is a leading platform that provides continuous security testing solutions, enabling organizations to stay ahead of cyberthreats. By leveraging a global community of trusted security researchers, Bugcrowd offers services such as penetration testing as a service, vulnerability disclosure, bug bounty programs, and attack surface management. The company assists industries such as financial services, healthcare, and technology in identifying and prioritizing vulnerabilities, ensuring proactive protection against potential cyber attacks. Driven by data and AI, Bugcrowd's comprehensive approach integrates seamlessly with existing systems to streamline the remediation of security issues, enhancing the overall security posture of its clients.

📋 Description

• Partner closely with engineering to refine architecture, validate new features, and drive security investment while prioritizing engineering velocity • Contribute to secure defaults, libraries, and “paved roads” that systematically eradicate entire classes of vulnerabilities • Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters • Ensure Bugcrowd’s bug bounty program can be a model for other customers • Experiment with new ways to leverage the creativity of the crowd • Provide feedback on new platform features to engineering and product • Lead cross-functional product security projects from scoping through delivery • Influence product and engineering roadmaps • Clearly communicate risk to technical and non-technical stakeholders • Use code and automation to scale coverage and eliminate repetitive work • Build systems based on incentives and accountability rather than bureaucratic process

🎯 Requirements

• 3+ years of experience in product security, application security, or secure software development • Ability to review code, automate tasks, and build security tooling in at least one modern programming language, such as Python, Go, Ruby, or Java • Hands-on experience with threat modeling, secure code review, and automated testing including SAST, DAST, and SCA • Solid grasp of common vulnerability classes, such as the OWASP Top 10 • Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product • Bachelor's degree in engineering, computer science, or a relevant field, or equivalent practical experience • Ability to complete all physical requirements with or without reasonable accommodation • Ability to remain in a stationary position 50% of the time • Ability to carry or move a laptop as needed throughout the work day • Requisite integrity to maintain highly confidential and sensitive information in strict confidence • Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history

🏖️ Benefits

• Remote, work-from-home 100% of the time • Reasonable accommodations for qualified individuals with disabilities • Benefits and privileges of employment (specific benefits not detailed)