3 hours ago
Remote, BrazilMid Level
Responsibilities
- Triage and validate incoming vulnerability submissions for Bugcrowd-managed programs.
- Curate submission data for validity, accuracy, and severity.
- Communicate with Bugcrowd clients and security researchers when additional information is needed.
- Handle incident response by escalating and communicating high-severity vulnerabilities to clients.
- Apply knowledge of OWASP Top Ten and other vulnerability types during security assessments.
- Use scripting or development skills to design or improve triage and validation tooling.
- Complete individual projects and assigned tasks on time while contributing to the team.
Requirements
- Bachelor’s degree or previous security consulting experience.
- Published and demonstrated passion for security assessment research.
- High proficiency with Burp Suite or another interception proxy.
- Working-level experience with industry-standard security tools such as nmap, sqlmap, and tools included in Kali Linux.
- Strong knowledge of application vulnerabilities including XSS, SQLi, XXE, IDOR, SSTI, and SSRF.
- Strong scripting or development skills in at least one language.
- Strong organization, influencing, and communication skills.
- Ability to work independently and contribute effectively to a team.
Benefits
- 100% remote, work-from-home position.
- Exposure to security programs across hundreds of companies and diverse targets, including cars, IoT devices, embedded systems, and mobile applications.
- Opportunities to work with leading security researchers and cutting-edge security testing methodologies.
- Bugcrowd offers team perks and a collaborative, inclusive workplace culture.
Categories
About Bugcrowd
We are a crowdsourced security company that safeguards organizations' assets from sophisticated threat actors before they can strike—by uniting our customers with trusted hackers via our AI-powered platform to take back control and stay ahead of attackers. Bugcrowd is backed by Blackbird Ventures, Costanoa Ventures, Industry Ventures, Paladin Capital Group, Rally Ventures, Salesforce Ventures and Triangle Peak Partners.