Product Security Engineer partnering with engineering and product teams to embed security into software development. Responsibilities include threat modeling, secure code review, automated security testing, security tooling, secure-by-default libraries, vulnerability reduction, and cross-functional project leadership. The role also supports Bugcrowd’s bug bounty program and may secure cloud-native platforms and infrastructure-as-code environments.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, severity, and OWASP Top Ten vulnerabilities; communicate with clients and security researchers; escalate critical findings through incident response; and contribute to scripting, development, or tooling that improves the triage and validation process.