2 days ago
Remote, IndiaMid Level
Responsibilities
- Partner with engineering to refine architecture, validate new features, and prioritize security investments.
- Build secure defaults, internal libraries, and security paved roads to prevent classes of vulnerabilities.
- Tune SAST, DAST, SCA, and secret-scanning tooling to reduce noise and improve security feedback.
- Operate Bugcrowd’s bug bounty program as a model customer and provide feedback on platform features.
- Lead cross-functional product security projects from scoping through delivery and influence product and engineering roadmaps.
- Use code and automation to scale security coverage and eliminate repetitive work.
- Communicate security risks to technical and non-technical stakeholders.
Requirements
- 3+ years of experience in product security, application security, or secure software development.
- Ability to review code, automate tasks, and build security tooling in at least one modern programming language such as Python, Go, Ruby, or Java.
- Hands-on experience with threat modeling, secure code review, automated testing, SAST, DAST, and SCA.
- Knowledge of common vulnerability classes, including the OWASP Top 10.
- Ability to manage projects and influence partners across engineering, DevOps, and product.
- Bachelor’s degree in engineering, computer science, or a relevant field, or equivalent practical experience.
- Preferred experience with bug bounty or vulnerability disclosure programs.
- Preferred experience building secure-by-default internal libraries and paved roads.
- Preferred experience securing cloud-native platforms and Infrastructure as Code, including Terraform, AWS, GCP, Kubernetes, or Docker.
- Preferred experience in a fast-paced, high-growth security or SaaS company.
Benefits
- Remote work-from-home arrangement 100% of the time.
- Reasonable accommodations are available for qualified individuals with disabilities.
- Employment background checks may be conducted for positions involving confidential or proprietary information.
Categories
About Bugcrowd
Bugcrowd builds a crowdsourced security platform used by security teams to run bug bounty, vulnerability disclosure, and penetration testing programs. The service combines SaaS workflow and triage with access to a vetted hacker community, paying researchers per validated finding while customers subscribe to managed programs. Founded in 2012 and headquartered in San Francisco, the privately held company emphasizes AI-driven matching and signal processing to prioritize actionable vulnerabilities.