SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Bugcrowd is seeking an Application Security Engineer II to join its technical operations team. In this role, you will triage and validate security vulnerability submissions from managed bug bounty programs serving some of the world's largest companies. You will assess incoming submissions for validity, accuracy, and severity; communicate with clients and security researchers to gather additional information when needed; and escalate high-severity issues through incident response channels.
Key responsibilities include:
- Reviewing and curating vulnerability submissions against OWASP Top Ten and other security frameworks
- Validating technical findings and assessing their business impact
- Communicating directly with clients and researchers to clarify submission details
- Handling incident response for critical vulnerabilities
- Contributing to tooling and process improvements, potentially through scripting or development work
You will work under the direction of the Director of Technical Operations and gain exposure to security testing across diverse domains: web applications, mobile apps, IoT devices, embedded systems, automotive, and more. This role offers exceptional learning opportunities—working with hundreds of security programs and the Internet's top security researchers exposes you to cutting-edge methodologies and obscure vulnerability types (XSS, SQLi, XXE, IDOR, SSTI, SSRF, etc.) that few organizations encounter.
Required qualifications:
- Bachelor's degree or equivalent security consulting experience
- Published work or demonstrated passion for security assessment research
- High proficiency with Burp Suite or similar interception proxies
- Working knowledge of industry-standard tools (nmap, sqlmap, Kali Linux utilities)
- Strong proficiency in at least one scripting or development language
- Excellent organization, communication, and time-management skills
- Ability to work independently and contribute effectively to team projects
This is a 100% remote position based in Brazil, ideal for security professionals looking to deepen their expertise at scale.
