Application Security Engineer II - Contract ( 6 months )
Bugcrowd
IndiaremotePosted 1 month ago
Skill Required
Application-Security-EngineeringSecurity-OperationsSecurity-TriageSecurity-AssessmentsPenetration-TestingApplication-Security-EngineerAppSec-EngineerCybersecurity-Engineer-IISecurity-EngineerSecurity EngineerApplication DevelopersecuritySOCBurp SuiteKali LinuxEmbedded CTestNGdesignLinuxOWASPNmapandAIContract
Key highlights
- 100% remote, work-from-home position
- Opportunity to work across potentially hundreds of security programs, not just one
- Rapidly gain fluency in complex vulnerability types (XSS, SQLi, XXE, IDOR, SSTI, SSRF, etc.)
- Requires bachelor's degree or security consulting experience; published security research preferred
- Requires high proficiency with Burp Suite and working experience with Kali Linux tools (nmap, sqlmap)
- Career growth focused – ideal for security professionals looking to advance their skills
Role overview
Bugcrowd is an application security assessment platform that has been empowering organizations since 2012 to stay ahead of threat actors by uniting elite hackers with their patented data and AI-powered Security Knowledge Platform. Based in San Francisco and New Hampshire, and supported by General Catalyst, Rally Ventures, and Costanoa Ventures, Bugcrowd runs crowdsourced bug bounty programs for some of the world's biggest companies. The Application Security Engineer (ASE) role involves curating and managing incoming security vulnerability submissions across these programs.
Responsibilities
- Ongoing triage and validation services of Bugcrowd managed programs
- Taking incoming submission data and curating it for validity, accuracy, and severity
- Communicating directly with Bugcrowd's clients or researchers when additional information is required
- Handling Incident Response – escalating and communicating about the highest severity bugs to clients
- Possessing strong knowledge of OWASP Top Ten type vulnerabilities
- Requiring a strong skill set in one scripting/development language, often to assist with the design or development of tooling for improving the triage/validation process
Requirements
- Bachelor's degree or previous security consulting experience
- Published and demonstrated passion for security assessment research
- High proficiency with Burp Suite (or any other interception proxy)
- Working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
- Ability to execute on individual projects but still contribute to the team
- Ability to complete tasks on time
- Strong organization, influencing, and communication skills
- Ability to perform essential functions of the job with or without reasonable accommodation
- Must be able to remain in a stationary position 50% of the time (sitting and/or standing)
- Must be able to carry/move laptop as needed throughout the work day
- Requisite integrity to maintain highly confidential, sensitive information in the strictest confidence
- Ability to pass background checks including Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history
Benefits
- Opportunity to work on not only one company's security program but potentially on hundreds
- Exposure to the Internet's best security researchers and their cutting-edge security testing methodologies
- Quickly become technically fluent in obscure/complex vulnerability types including XSS, SQLi, XXE, IDOR, SSTI, SSRF, and many others
- Exposure to security programs for cars, IoT devices, embedded systems, mobile applications, and more
- Position is perfect for security professionals looking to take their skills to the next level
- Awesome team and tons of perks
- Selected as one of 'The 10 Coolest Security Startups Of 2016' by crn.com
- 100% remote, work-from-home environment
Additional details
- Position works under the direction of the Director of Technical Operations
- Bugcrowd uses patented CrowdMatch technology to find the perfect talent for unique security programs
- Bugcrowd aims to create a new era of modern crowdsourced security that outpaces threat actors
- The company maintains an EEO policy covering race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, and sexual orientation
- Bugcrowd is committed to full inclusion of all qualified individuals and provides reasonable accommodations for people with disabilities
- Bugcrowd emphasizes diversity, stating that diversity in the workplace is vital to a company's success and growth
- The culture is described as feeling like a family internally, with a broad range of people including musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, and artists
- Bugcrowd values perspectives and experiences from underrepresented backgrounds
- Personal data submitted in connection with an application will be processed in compliance with Bugcrowd's Privacy Policy
- Originally posted on Himalayas