SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Bugcrowd is a preemptive security platform that unifies exposure discovery, offensive testing, and AI-driven intelligence to help organizations identify and validate real-world security risks. Founded in 2012 and backed by General Catalyst, Rally Ventures, and Costanoa Ventures, the company operates at scale managing bug bounty programs for some of the world's largest organizations.
As an Application Security Engineer (ASE), you will curate and manage incoming security vulnerability submissions across hundreds of client programs. You will perform triage and validation of submissions, assess vulnerability validity, accuracy, and severity, and communicate directly with Bugcrowd clients and security researchers when additional information is needed. The role includes incident response responsibilities—escalating and communicating critical bugs to clients.
This position offers exceptional learning opportunities. You will be exposed to cutting-edge security testing methodologies from top security researchers worldwide and develop technical fluency in complex vulnerability types including XSS, SQLi, XXE, IDOR, SSTI, SSRF, and others. You will work across diverse domains including web applications, mobile apps, IoT devices, embedded systems, and automotive security.
You will work under the direction of the Director of Technical Operations and contribute to both individual projects and team initiatives. The role is ideal for security professionals looking to advance their skills through real-world exposure to hundreds of security programs and diverse attack surfaces.
The position is 100% remote, work-from-home.
**Requirements:**
- Bachelor's degree or previous security consulting experience
- Published and demonstrated passion for security assessment research
- High proficiency with Burp Suite (or equivalent interception proxy)
- Working-level experience with industry standard tools (nmap, sqlmap, Kali Linux tools)
- Strong skill set in at least one scripting/development language
- Deep knowledge of OWASP Top Ten vulnerability types
- Ability to execute on individual projects while contributing to team goals
- Strong organizational, influencing, and communication skills
- Ability to meet deadlines consistently
