Application Security Engineer II - Contract ( 6 months )

3 weeks, 3 days ago
Contract
Mid Level
Cybersecurity
Bugcrowd

Bugcrowd

Bugcrowd provides a crowdsourced cybersecurity platform that connects organizations with elite security researchers to enhance security measures through managed bug bounty programs, penetration testing, and vulnerability disclosure initiatives.

Internet Software & Services
1K-5K
Founded 2012
$79M raised

Description

  • Triage and validate incoming vulnerability submissions for accuracy, validity, and severity.
  • Communicate with clients and security researchers to obtain additional information.
  • Manage incident response for high-severity vulnerabilities, including escalation and client communication.
  • Assess vulnerabilities across web applications, mobile apps, IoT devices, embedded systems, and other technologies.
  • Apply knowledge of OWASP Top Ten and vulnerability types such as XSS, SQLi, XXE, IDOR, SSTI, and SSRF.
  • Design or develop scripting and tooling to improve the triage and validation process.
  • Execute individual projects while contributing effectively to the broader team.
  • Complete assigned tasks on schedule and maintain organized workflows.

Requirements

  • Bachelor’s degree or prior security consulting experience.
  • Published and demonstrated passion for security assessment research.
  • Strong knowledge of OWASP Top Ten vulnerabilities.
  • High proficiency with Burp Suite or another interception proxy.
  • Working experience with industry-standard tools such as nmap, sqlmap, and Kali Linux utilities.
  • Strong skills in at least one scripting or development language.
  • Strong organization, communication, and influencing skills.
  • Ability to work independently and collaboratively.
  • Ability to complete the physical requirements of the role with or without reasonable accommodation.
  • Integrity and ability to maintain highly confidential information; background checks may be required.

Benefits

  • 100% remote, work-from-home position.
  • Exposure to security programs for potentially hundreds of companies and diverse technologies.
  • Opportunities to work with elite security researchers and cutting-edge testing methodologies.
  • Inclusive workplace with a focus on diversity and belonging.
  • Reasonable accommodations available for qualified individuals with disabilities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Product Security Engineer (Contract)

Iru Enterprise IT, cybersecurity, identity/security, endpoint management, compliance software

Iru is seeking a Senior Product Security Engineer for a 6-month, 40-hour-per-week contract to embed security throughout the software development lifecycle and help teams build secure-by-design products.

AWS Azure GCP GitHub Actions Kubernetes Microservices OAuth OpenID Connect
2 weeks, 2 days ago

Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Fixed-term contract)

Form3 251-1K Diversified Financial Services

Form3 is hiring a Senior Cloud Security Engineer on a 12-month fixed-term contract to deliver cloud security, resilience, and governance improvements across its cloud-native payments platform.

AWS CI/CD Kubernetes Terraform
1 week, 1 day ago

Senior Identity Security Engineer (Remote - LATAM)

Atmosera 51-250 IT Services

Atmosera is seeking a Senior Identity Security Engineer to modernize and secure hybrid Active Directory and Microsoft Entra ID environments while advancing identity governance and Zero Trust initiatives for clients.

Active Directory Azure OAuth PowerShell SAML
2 weeks, 4 days ago

Consultant - Senior Privacy Analyst

Kalles Group 11-50 Internet Software & Services

Kalles Group is seeking a privacy professional to build and manage a Canadian Records of Processing Activities (ROPA) program for a large global retailer, documenting data practices across business units and translating global structures into Canada-specific records.

3 weeks, 4 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers