17 hours ago
Remote, IndiaEntry Level
Responsibilities
- Triage and validate incoming vulnerability submissions for validity, accuracy, and severity.
- Communicate with Bugcrowd clients and security researchers when additional information is needed.
- Handle incident response by escalating and communicating about the highest-severity vulnerabilities.
- Apply knowledge of OWASP Top Ten and related vulnerability classes, including XSS, SQLi, XXE, IDOR, SSTI, and SSRF.
- Assist with designing or developing tooling to improve the triage and validation process.
Requirements
- Bachelor’s degree or previous security consulting experience.
- Published and demonstrated passion for security assessment research.
- High proficiency with Burp Suite or another interception proxy.
- Working-level experience with industry-standard security tools, including nmap, sqlmap, or tools included in Kali Linux.
- Ability to execute individual projects while contributing to a team and completing tasks on time.
- Strong organization, influencing, and communication skills.
Benefits
- Fully remote, work-from-home arrangement 100% of the time.
- Exposure to security programs spanning hundreds of companies and technologies, including cars, IoT devices, embedded systems, and mobile applications.
- Opportunities to work with leading security researchers and cutting-edge security testing methodologies.
Categories
About Bugcrowd
Bugcrowd builds a crowdsourced security platform used by security teams to run bug bounty, vulnerability disclosure, and penetration testing programs. The service combines SaaS workflow and triage with access to a vetted hacker community, paying researchers per validated finding while customers subscribe to managed programs. Founded in 2012 and headquartered in San Francisco, the privately held company emphasizes AI-driven matching and signal processing to prioritize actionable vulnerabilities.