No applications. Teams find and message you directly.
Join Bugcrowd as an Application Security Engineer to validate vulnerability reports and engage with clients and researchers. Work remotely from Brazil in a dynamic environment.
Bugcrowd is a platform for finding and validating vulnerabilities with the help of security researchers and AI. Founded by Sergey Belokamen, it raised $102 million in a 2024 funding round and connects over 500,000 ethical hackers.
- Validate incoming vulnerability reports for accuracy and severity.
- Conduct triage of findings in managed bug bounty programs for clients.
- Escalate critical vulnerabilities and participate in incident response.
- Communicate with clients and researchers to clarify report details.
- Knowledge of OWASP Top Ten vulnerabilities and application security assessment methods.
- Proficient with Burp Suite or similar intercepting proxy.
- Practical experience with tools like nmap, sqlmap, or Kali Linux.
- Scripting or development skills for automating vulnerability checks.