23 days ago
Huntsville, AL, USAStaff+
Base Salary
$151k - $189k/yr
Responsibilities
- Lead technical efforts and own system architecture and development across the stack.
- Build external attack surface management technology that maps domains, hosts, software, people, registrations, and documents associated with target organizations.
- Develop a general passive-illumination framework that records observations, inferences, sources, and human decisions.
- Exercise high discretion over technical decisions to achieve business outcomes.
- Debug and solve complex technical problems in a security-focused product environment.
Requirements
- 7+ years of software development experience.
- Strong proficiency in TypeScript and modern JavaScript.
- Extensive experience with React and JavaScript web development frameworks, with Next.js preferred.
- Familiarity with OAuth2, JWT, and other authentication and authorization frameworks.
- Experience with CI/CD pipelines and cloud deployment platforms such as Vercel, AWS, Azure, or GCP.
- Experience with ORM frameworks and relational databases such as Prisma, Drizzle, and PostgreSQL.
- Excellent debugging, analytical, and problem-solving skills.
- Cybersecurity knowledge, including penetration testing, OSINT, and red teaming.
- Active secret security clearance is required.
- Preferred: hands-on experience with LLM APIs such as OpenAI and Anthropic, AI application development, AI orchestration frameworks, and agent-based systems.
Benefits
- Hybrid work arrangement: work from home most of the time with some onsite work.
- Base pay range of $151,360–$189,200, with possible eligibility for a discretionary bonus program or commission plan.
- Reasonable accommodations are available for qualified individuals with disabilities.
- The role requires sitting or standing for approximately 50% of the time and carrying or moving a laptop as needed.
Tech Stack
Categories
About Bugcrowd
Bugcrowd builds a crowdsourced security platform used by security teams to run bug bounty, vulnerability disclosure, and penetration testing programs. The service combines SaaS workflow and triage with access to a vetted hacker community, paying researchers per validated finding while customers subscribe to managed programs. Founded in 2012 and headquartered in San Francisco, the privately held company emphasizes AI-driven matching and signal processing to prioritize actionable vulnerabilities.