
Application Security Engineer
Bugcrowd
- Location
- India
- Posted
Application Security Engineer at Bugcrowd: Curate and manage security vulnerability submissions for top companies
Bugcrowd
Application Security Engineer at Bugcrowd: Curate and manage security vulnerability submissions for top companies
Rackspace
Lead security policy management and awareness training for large enterprises using Archer GRC Tool, with a strong understanding of cybersecurity best practices.
The Athletic Media Company
Full-stack software engineer for The Athletic in Australia, with experience in Javascript, React, Apollo, and AWS.
Grafana Labs
Support Engineer for Grafana Labs in Australia - Troubleshoot observability stack issues, collaborate with developers, and contribute to internal knowledge base.
Remote Staff Engineer position at Reddit Pro, leading product development with cross-functional teams, delivering high-quality products quickly.
Binance
Senior ReactJS Engineer for Binance's web and native applications
Wealthsimple
Reconciliations Team Member at Wealthsimple: Ensure accuracy of books of record, resolve discrepancies, and mitigate risk in a remote-first environment with competitive salary and benefits.
Testlio
Senior Generative AI Engineer at Testlio: lead innovative solutions, collaborate globally, and drive business outcomes.
Binance
Senior Big Data Engineer at Binance: Design & build efficient data platforms with automation, ML & DevOps
Binance
Backend Engineer (Java + Big Data) - Design & develop microservices architecture, implement data solutions, optimize backend services
Telnyx
Business Intelligence Engineer (Remote) at Telnyx - design scalable data models, create ETL pipelines, ensure data quality & governance, collaborate with cross-functional teams.
Binance
Senior Big Data Engineer at Binance: Develop robust data pipelines & architectures, collaborate with risk team, and drive productization of risk data
Kraken
Join a mission-focused crypto company as a backend developer, integrating systems with blockchains and protecting client funds.
Binance
Senior Site Reliability Engineer (Big Data) at Binance: Design & improve Big Data infrastructure/services with automation components, Linux, computer networks, and programming languages.
Mercury
Develop seamless experiences for customers submitting fraud and dispute claims while empowering internal teams with efficient tools at Mercury's Card Fraud and Disputes team. Collaborate cross-functionally to deliver impactful solutions using React, TypeScript, Redux, Haskell, Yesod, Persistent, and PostgreSQL.
Syndigo
Join Syndigo as a Software Engineer (Backend - Java/Bigdata) and contribute to the development of software solutions for various industries.
Kraken
Join a remote team developing premium crypto products with a focus on security and blockchain integration.
Array
Join Array as a remote engineer and utilize AI tools to drive development efficiency and effectiveness.
Alma
Senior Full Stack Engineer at Alma: design & develop scalable product features using modern web technologies
Binance
Card Operations Specialist at Binance: Manage fiat operations, collaborate with payment service providers, monitor transaction data, develop strategies to enhance user experience.
Bugcrowd
At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE), you will curate and manage incoming security vulnerability submissions to some of the world's biggest companies' bug bounty programs. You will be exposed to cutting-edge security testing methodologies, obscure/complex vulnerabilities, and a variety of industries such as cars, IoT devices, embedded systems, mobile applications, and more. Our team is awesome, with tons of perks, including being selected as one of 'The 10 Coolest Security Startups Of 2016' by crn.com. You will have the opportunity to take your skills to the next level and contribute to groundbreaking projects. With a remote work option, you can thrive in our fast-paced environment. We value strong knowledge of OWASP Top Ten type vulnerabilities, proficiency with industry-standard tools, and excellent communication skills. If you're passionate about security assessment research and want to make a difference, we encourage you to apply.
Job Summary
At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions to some of the world’s biggest companies’ bug bounty programs. Here are just a few of the reasons why we are the best:
A tenure at Bugcrowd often means you have worked on not only one company’s security program but potentially on hundreds.
As an ASE at Bugcrowd you will be exposed to the Internet’s best security researchers and their cutting-edge security testing methodologies. Our ASEs quickly become technically fluent in obscure/complex XSS, SQLi, XXE, IDOR, SSTI, SSRF, and many other vulnerability types. There is no other organization that offers the learning opportunity that Bugcrowd does.
You will be exposed to things outside of your comfort zone. We routinely run security programs for cars, IoT devices, embedded systems, mobile applications, and more!
We have an awesome team and tons of perks. We’ve even been selected as one of “The 10 Coolest Security Startups Of 2016” by crn.com.
**Please note we are only considering candidates located in India at this time
Essential Duties & Responsibilities
An ASE is responsible for the ongoing triage and validation services of Bugcrowd managed programs. Under the direction of the Director of Technical Operations, you will take incoming submission data and curate it for validity, accuracy, and severity as well as communicate directly with Bugcrowd’s clients or researchers when additional information is required. ASEs also handle Incident Response – escalating and communicating about the highest severity bugs to clients. ASEs need to have strong knowledge of OWASP Top Ten type vulnerabilities. They also usually require a strong skill set in one scripting/development language, often to assist with the design or development of tooling for improving the triage/validation process. The ASE position is perfect for security professionals looking to take their skills to the next level.
Education, Experience, Skills, & Abilities
Bachelor’s degree or previous security consulting experience
Published and demonstrated passion for security assessment research
High proficiency with Burp Suite (or any other interception proxy) and a working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
Ability to execute on individual projects but still contribute to the team
Ability to complete tasks on time
Strong organization, influencing, and communication skills
Working Conditions
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and/or standing - Must be able to remain in a stationary position 50% of the time
Carrying and /or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.