Application Security Engineer II - Contract ( 6 months )

11 hours, 51 minutes ago
Contract
Mid Level
Cybersecurity
Bugcrowd

Bugcrowd

Bugcrowd provides a crowdsourced cybersecurity platform that connects organizations with elite security researchers to enhance security measures through managed bug bounty programs, penetration testing, and vulnerability disclosure initiatives.

Internet Software & Services
1K-5K
Founded 2012
$79M raised

Description

  • Triage and validate incoming vulnerability submissions for accuracy, validity, and severity.
  • Communicate with clients and security researchers to obtain additional information.
  • Manage incident response for high-severity vulnerabilities, including escalation and client communication.
  • Assess vulnerabilities across web applications, mobile apps, IoT devices, embedded systems, and other technologies.
  • Apply knowledge of OWASP Top Ten and vulnerability types such as XSS, SQLi, XXE, IDOR, SSTI, and SSRF.
  • Design or develop scripting and tooling to improve the triage and validation process.
  • Execute individual projects while contributing effectively to the broader team.
  • Complete assigned tasks on schedule and maintain organized workflows.

Requirements

  • Bachelor’s degree or prior security consulting experience.
  • Published and demonstrated passion for security assessment research.
  • Strong knowledge of OWASP Top Ten vulnerabilities.
  • High proficiency with Burp Suite or another interception proxy.
  • Working experience with industry-standard tools such as nmap, sqlmap, and Kali Linux utilities.
  • Strong skills in at least one scripting or development language.
  • Strong organization, communication, and influencing skills.
  • Ability to work independently and collaboratively.
  • Ability to complete the physical requirements of the role with or without reasonable accommodation.
  • Integrity and ability to maintain highly confidential information; background checks may be required.

Benefits

  • 100% remote, work-from-home position.
  • Exposure to security programs for potentially hundreds of companies and diverse technologies.
  • Opportunities to work with elite security researchers and cutting-edge testing methodologies.
  • Inclusive workplace with a focus on diversity and belonging.
  • Reasonable accommodations available for qualified individuals with disabilities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Consultant - Senior Privacy Analyst

Kalles Group 11-50 Internet Software & Services

Kalles Group is seeking a privacy professional to build and manage a Canadian Records of Processing Activities (ROPA) program for a large global retailer, documenting data practices across business units and translating global structures into Canada-specific records.

1 day, 13 hours ago

Cybersecurity, Incident Response & Hands-On Training Contract IT Instructor (Onsite and virtual live classes) (copy)

Pluralsight 1K-5K Internet Software & Services

Pluralsight is seeking independent contract cybersecurity instructors and scenario developers worldwide to deliver remote and onsite incident-response training, tabletop exercises, and Capture the Flag events for enterprise clients.

Bash Burp Suite Cybersecurity Docker Metasploit Penetration Testing Python Splunk Wireshark
2 days, 13 hours ago

Senior DevSecOps / Cloud Governance Consultant

Trility Consulting 51-250 Internet Software & Services

Trility Consulting is seeking a Senior DevSecOps/Cloud Governance Consultant for an approximately eight-week remote 1099 engagement to implement practical Azure governance, FinOps, policy, and cloud-management solutions for a large enterprise environment.

AWS Azure DevSecOps GCP Git GitHub Actions Power BI Terraform
4 days, 13 hours ago

Security Engineer

GXA 11-50 Internet Software & Services

GXA is hiring a hands-on Security Engineer to operate and improve its gShield security services, support client environments, and lead technical incident response and remediation.

Active Directory AWS Azure Cybersecurity DHCP DNS PowerShell SIEM TCP/IP Windows Server
2 weeks, 1 day ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers