Posted today · be early
Product Security Engineer
Bugcrowd
IndiaremotePosted today
Skill Required
Product-Security-EngineerApplication-Security-EngineerSecurity-EngineerProduct-Security-EngineeringProduct-Security-SpecialistSoftware-Security-EngineerSecurity EngineersecurityEngineeringR ProgrammingKubernetesautomationTerraformbuildingDockerTestNGPythonDevOpsOWASPCloudDesign PatternsJavaRubyAWSGCPandGoAIFulltime
Key highlights
- Remote work-from-home 100% of the time
- 3+ years of experience in product security, application security, or secure software development
- Diversity and inclusion initiatives, including support for underrepresented backgrounds
- Bachelor's degree in engineering, computer science, or relevant field, or equivalent practical experience
Role overview
Bugcrowd is seeking security engineers to partner with engineering teams, build secure-by-default systems, and drive measurable security outcomes. The role involves refining architecture, validating features, and scaling security coverage through automation and incentives. Candidates should have hands-on experience in application security, secure code review, and project management across engineering and DevOps. The company emphasizes a culture of collaboration, diversity, and remote work.
Responsibilities
- Partner closely with engineering to refine architecture, validate new features, and prioritize security investment while maintaining engineering velocity
- Contribute to secure defaults, libraries, and 'paved roads' to systematically eradicate entire classes of vulnerabilities
- Tune security tooling (SAST, DAST, SCA, secret scanning) to reduce noise and focus on critical issues
- Ensure the bug bounty program serves as a model for customers and experiment with new ways to leverage crowd creativity
- Lead cross-functional product security projects from scoping to delivery, influencing roadmaps and communicating risk to stakeholders
- Use code and automation to scale coverage and eliminate repetitive work, building systems based on incentives and accountability
Requirements
- 3+ years of experience in product security, application security, or secure software development
- Ability to review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java)
- Hands-on experience with core application security practices (threat modeling, secure code review, automated testing) and knowledge of common vulnerability classes (e.g., OWASP Top 10)
- Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product
- Bachelor's degree in engineering, computer science, or relevant field, or equivalent practical experience
Nice to have
- Previous experience with Bug Bounty or vulnerability disclosure programs
- Background in building 'paved roads' or secure-by-default internal libraries to eliminate entire classes of vulnerabilities
- Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker)
- Experience working within a fast-paced, high-growth security or SaaS company
Benefits
- Remote work-from-home 100% of the time
- Diversity and inclusion initiatives, including support for underrepresented backgrounds
- Background checks for positions involving confidential information
- Equal Employment Opportunity (EOE) with reasonable accommodations for disabilities
Additional details
- Must be able to remain in a stationary position 50% of the time and carry/move a laptop as needed
- Access to highly confidential, sensitive information; applicants must maintain strict confidentiality
- Background checks may include Social Security verification, employment history, references, education, and criminal history
- Personal data submitted during application is processed in compliance with Bugcrowd's Privacy Policy