Bugcrowd
Bugcrowd builds a crowdsourced security platform used by security teams to run bug bounty, vulnerability disclosure, and penetration testing programs. The service combines SaaS workflow and triage with access to a vetted hacker community, paying researchers per validated finding while customers subscribe to managed programs. Founded in 2012 and headquartered in San Francisco, the privately held company emphasizes AI-driven matching and signal processing to prioritize actionable vulnerabilities.
Open Positions at Bugcrowd
9 open positions
Own the architecture and evolution of ARM and AArch64 execution support at Bugcrowd, working across emulation, operating systems, binary analysis, fuzzing, and symbolic execution. This staff-level role focuses on improving the correctness, performance, and reliability of large-scale emulated workloads and firmware analysis.
Application Security Engineer responsible for triaging, validating, and assessing vulnerability submissions across large-scale bug bounty programs. The role combines hands-on application security research, incident escalation, client and researcher communication, and security tooling improvements in a fully remote five-month contract.
Bugcrowd is hiring a Product Security Engineer to embed security into product development through secure defaults, application security practices, automation, and cross-functional engineering partnership. This fully remote role owns security projects end to end and helps reduce vulnerabilities at scale.
Bugcrowd is seeking a Product Security Engineer to embed security into product development, build secure-by-default tooling, and lead cross-functional initiatives. This fully remote role focuses on application security, automation, vulnerability prevention, and measurable security outcomes.
Lead full-stack development for green-field products, shaping architecture, scalable APIs, integrations, and user interfaces across multiple teams. The role also builds production systems powered by LLMs, including agents, tool use, and evaluation workflows.
Build verifiable reinforcement-learning environments that enable AI agents to discover, exploit, and remediate software vulnerabilities. This role combines cybersecurity research, low-level systems analysis, LLM evaluation, and scalable ML infrastructure.
Application Security Engineer II will triage and validate vulnerability submissions for large-scale bug bounty programs, assess severity, and coordinate with clients and security researchers. The role offers hands-on exposure to diverse application, mobile, IoT, embedded, and automotive security assessments.
Lead the architecture and development of a full-stack external attack surface management platform, turning discovered organizational data into trustworthy, traceable facts for security analysts. This staff-level role combines TypeScript and React development with ownership of core system design and delivery.
Bugcrowd is seeking a Product Security Engineer to make security a default property of its products through secure architecture, tooling, automation, and cross-functional partnership. This fully remote role focuses on building scalable security solutions and driving measurable application-security outcomes.