11 hours ago
Remote, IndiaMid Level
Responsibilities
- Triage and validate incoming vulnerability submissions for Bugcrowd-managed programs.
- Curate reports for validity, accuracy, and severity.
- Communicate with clients and security researchers when additional information is needed.
- Handle incident response by escalating and communicating about the highest-severity vulnerabilities.
- Apply knowledge of OWASP Top Ten vulnerability types.
- Use scripting or development skills to help design and develop tooling that improves the triage and validation process.
- Execute individual projects while contributing to the broader team.
Requirements
- Bachelor’s degree or previous security consulting experience.
- Published and demonstrated passion for security assessment research.
- High proficiency with Burp Suite or another interception proxy.
- Working-level experience with industry-standard security tools such as nmap, sqlmap, and tools included in Kali Linux.
- Strong knowledge of application security vulnerabilities including XSS, SQLi, XXE, IDOR, SSTI, and SSRF.
- Strong organization, influencing, communication, and time-management skills.
Benefits
- Five-month contract position.
- Remote, work-from-home arrangement 100% of the time.
- Reasonable accommodations are available for qualified individuals with disabilities.
- Exposure to security programs spanning companies, cars, IoT devices, embedded systems, and mobile applications.
Categories
About Bugcrowd
Bugcrowd builds a crowdsourced security platform used by security teams to run bug bounty, vulnerability disclosure, and penetration testing programs. The service combines SaaS workflow and triage with access to a vetted hacker community, paying researchers per validated finding while customers subscribe to managed programs. Founded in 2012 and headquartered in San Francisco, the privately held company emphasizes AI-driven matching and signal processing to prioritize actionable vulnerabilities.