Application Security Engineer

Full-time Controle de qualidade

Job Summary

At Bugcrowd, we handle application security assessment at a large scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions to some of the world’s biggest companies’ bug bounty programs. You will work closely with security researchers, clients, and internal teams to ensure accurate triage, validation, and incident response.

Essential Duties & Responsibilities

• Triage and validate incoming vulnerability submissions for validity, accuracy, and severity.
• Communicate directly with Bugcrowd’s clients or researchers to obtain additional information when required.
• Escalate and report the highest severity bugs to clients as part of Incident Response.
• Maintain strong knowledge of OWASP Top Ten vulnerabilities and other critical security flaws such as XSS, SQLi, XXE, IDOR, SSTI, SSRF, etc.
• Develop and maintain tooling, scripts or small appli...