Application Security Engineer

We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Our network of hackers brings diverse expertise to uncover hidden weaknesses, adapting swiftly to evolving threats, even against zero-day exploits. With unmatched scalability and adaptability, our data and AI-powered platform provides actionable insights and streamlines vulnerability management, allowing organizations to fortify their defenses and stay ahead of emerging threats. Bugcrowd is looking for an Application Security Engineer to join our growing team. As an Application Security Engineer, you will play a crucial role in safeguarding our platform and ensuring the security of our customers' data. You will be responsible for identifying and mitigating security vulnerabilities, implementing security best practices, and collaborating with our engineering teams to build secure software. The ideal candidate has a strong understanding of application security principles, experience with various security testing methodologies, and a passion for staying up-to-date with the latest security threats and technologies. Responsibilities: * Conduct security assessments of web applications, APIs, and other software systems. * Identify and document security vulnerabilities, including their impact and remediation steps. * Develop and implement security testing tools and processes. * Collaborate with engineering teams to integrate security best practices into the software development lifecycle. * Provide security guidance and training to developers and other stakeholders. * Stay up-to-date with the latest security threats and vulnerabilities. * Participate in incident response activities. * Help improve Bugcrowd’s overall security posture. Qualifications: * Bachelor's degree in Computer Science, Information Security, or a related field. * 5+ years of experience in application security. * Strong understanding of web application security principles and common vulnerabilities (e.g., OWASP Top 10). * Experience with security testing tools such as Burp Suite, OWASP ZAP, and Metasploit. * Experience with static and dynamic code analysis. * Familiarity with various programming languages, such as Python, JavaScript, and Java. * Experience with cloud security and containerization technologies (e.g., Docker, Kubernetes). * Excellent communication and collaboration skills. * Ability to work independently and as part of a team. Bonus Points: * Relevant certifications (e.g., CISSP, CEH, OSCP). * Experience with penetration testing. * Experience with vulnerability management. * Experience with incident response. * Experience with threat modeling. Benefits: * Competitive salary and benefits package. * Opportunity to work on cutting-edge security technologies. * Collaborative and supportive work environment. * Opportunities for professional development and growth. * Flexible work arrangements. * Generous paid time off. * Medical, dental, and vision insurance. * 401(k) plan with company match. * Employee stock purchase plan. Bugcrowd is an Equal Opportunity Employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.