Teams at Bugcrowd

Product Security Engineer partnering with engineering and product teams to embed security into software development. Responsibilities include threat modeling, secure code review, automated security testing, security tooling, secure-by-default libraries, vulnerability reduction, and cross-functional project leadership. The role also supports Bugcrowd’s bug bounty program and may secure cloud-native platforms and infrastructure-as-code environments.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, severity, and OWASP Top Ten vulnerabilities; communicate with clients and security researchers; escalate critical findings through incident response; and contribute to scripting, development, or tooling that improves the triage and validation process.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Communicate with clients and security researchers, determine vulnerability validity, accuracy, and severity, escalate critical incidents, and support application security tooling through scripting or development. The role requires strong knowledge of OWASP vulnerabilities, security assessment tools, technical research, organization, independent execution, and effective communication. This is a fully remote position.