Bugcrowd

Operations

• Lead multiple concurrent Red Team engagements across industries.
• Define, negotiate and document scope, objectives, rules of engagement, deliverables, constraints, escalation & approval pathways.
• Oversee milestone planning e.g. kick-offs, stand-ups, wash-ups, strategic debriefs.
• Manage resources e.g. operator assignments, tooling, support functions.
• Track engagement progress vs objectives, adjust as needed (scope creep, technical roadblocks, changing risk posture).
• Assess and manage technical risk ensuring that any red team activity minimises risk to customer operations, data, systems.
• Real-time decision making during operations around TTP deployment, bypass of defenses, managing detections or unexpected discovery.
• Review and approve attack plans, threat modelling, intelligence.
• Ensure operators employ strong operational security (OpSec), safe tradecraft, evidence collection, clean up post-engagement.
• Maintain up-to-date knowledge of Red Team tools, adversary TTPs, defensive controls, detection systems.
• Ensure engagements comply with relevant legislation (Computer Misuse / cybercrime laws, data protection / privacy laws, cross-border implications).
• Ensure proper RoE, Authorisation, NDAs etc are in place.
• Ethical boundaries are defined and respected (non-disruptive vs destructive operations, safety, privacy).
• Ensure client teams (Blue, White, Leadership) are appropriately engaged / informed while preserving operational effectiveness.
• Ensure verifiable trail of evidence, documentation of decisions.
• Ingest threat intelligence (both internal and external) to design realistic adversary scenarios.
• Analyse likely threat actors relevant to the client’s sector, geography, technology stack.
• Ensure mapping of TTPs to enterprise defensive controls so that bypass or detection assumptions are realistic.
• Define high-level & detailed attack scenarios, get buy-in from stakeholders.
• Review deliverables for technical quality, completeness, clarity.
• Approve final reports, attack paths and recommendations.
• Ensure reports are actionable, mapped to risks, business impact, prioritisation and are defensible.
• Lead strategic debriefs with clients showing what worked, what was detected and what needs improvement.
• Post engagement “wash-up” with lessons learned, replay / walkthrough and remediation tracking.
• Mentor Red Team operators in skills, tradecraft and OpSec.
• Drive internal research, new tools, detection evasion, environment emulation in cloud, OT etc.
• Keep up with CREST (and other) certification standards / best practices.
• Build / maintain knowledge base of TTPs, failed vs successful techniques and case studies.
• Input into training, playbooks, standard operating procedures (SOPs).
• Maintain and evolve capability libraries (TTPs, tooling, tradecraft, detection evasion). Dedicated time will be provided for this.
• Assist in scoping and proposal of Red Team engagements for prospects.
• Provide subject-matter expert support during sales cycles.
• Help clients understand trade-offs (cost, risk, duration, impact).
• Help articulate the value of Red Team exercises vs other security activities (pen testing, bug bounty etc.).
• Part of “White Team” / engagement control group so monitoring risk, ensuring escalation and maintaining safety boundaries.
• Liaise with clients’ internal stakeholders, Security, Legal, Compliance, Business Risk, IT / DevOps / Ops / Cloud teams.
• Escalate issues when engagements encounter risk, detection, or adverse business impact.
• Manage communications & approval flows using Attack Approval Chains and Comms Channels.
• Ensure engagements satisfy frameworks/regulatory/compliance requirements applicable to client e.g. FedRAMP, STAR / CREST STAR, STAR-equivalent, DORA, TIBER, CBEST, AASE, etc. if applicable.

Red Team Operations Manager

Customer Support

• Own the logo and revenue renewal for an assigned portfolio of customer accounts
• Build and maintain trusted relationships with key stakeholders across the customer lifecycle
• Serve as the internal voice of the customer and advocate for customer needs in planning, delivery, and product feedback
• Partner with Sales to ensure seamless transitions between onboarding, adoption, and renewal
• Monitor customer health scores, usage data, and engagement signals to anticipate risk and proactively intervene
• Conduct regular business reviews and renewal readiness checkpoints with each customer
• Coordinate onboarding and technical delivery with assigned Solutions Architect
• Support configuration, hygiene, and issue resolution in partnership with the Shared Success team
• Act as an expert resource in Bugcrowd’s solutions, educating customers on product capabilities relevant to their unique business cases.
• Ensure execution of customer journey touchpoints, including onboarding, program performance and health, business reviews, retention, support, aging submissions and other opportunities.
• Understand and articulate business value and outcomes by aligning usage and adoption of Bugcrowd to strategic business goals of customers.
• Collaborate with Paid Program Managers (where applicable) to support delivery of Enhanced and Premier service tiers
• Document and maintain account plans, customer profiles, and success metrics in Gainsight and Salesforce

Senior Customer Experience Manager

Full-stack Engineer

• Build and enhance a global platform connecting hackers and companies for better security
• Collaborate with product teams and stakeholders to provide engineering insights
• Work with designers on our design system to ensure accessibility and compliance
• Enhance the platform usability for internal teams, including Application Security Engineers

Software Engineer II

Security Engineer

• Define the Cyber Security Strategy for Bugcrowd and identify areas of improvements to the threat landscape, internal risk tolerance objectives, and/or compliance objectives
• Ensure the technical aspects of vendor acquisitions and tools are safe for Bugcrowd’s use, in unison with the IT and compliance teams
• Assess corporate technology systems, determine strategy for changes, enhancement and improvements; recommend and implement the same, from the perspective of cyber security
• Carry out and fulfill the cyber security strategy of bugcrowd, proactively improving the security posture with time
• Work with GRC to assist in designing, develop, implement and coordinate areas of policies and procedures for compliance with SOC-2, NIST 800-53v4, ISO27001,ISO27018, and FedRAMP
• Manage Bugcrowd’s bug bounty program, ensuring that clients have a standard to aspire to, when running their own bounty programs
• Analyze new features prior to development or launch, to ensure the security measures in place are sufficient for the project
• Perform IR for all parts of the business (on-call 24x7) and perform root cause analysis upon the incidents to properly mitigate them in the future

Senior Director, Cybersecurity

• Serve as a trusted advisor to customers, understanding their needs and advocating on their behalf to ensure successful outcomes.
• Manage multiple penetration testing engagements end-to-end, ensuring they are delivered on time and meet or exceed customer expectations.
• Accurately scope penetration tests across various domains, including network, web applications, mobile, and APIs.
• Work closely with sales, technical sales, pen testers, crowd members, and the Hacker Success team to coordinate efforts and resources.
• Effectively communicate complex offensive security concepts to a diverse range of stakeholders, including technical and non-technical audiences.
• Engage with hackers from around the world, facilitating clear communication and collaboration across different time zones and cultures.
• Operate efficiently under tight deadlines, managing multiple priorities and regularly switching contexts without compromising quality.
• Proactively identify and resolve issues that arise during engagements, employing strong analytical and critical thinking skills.
• Stay up-to-date with the latest trends and advancements in offensive security, continuously seeking ways to improve processes and methodologies.
• Demonstrate the ability to work with little to no supervision, taking initiative and ownership of responsibilities.
• Exhibit strong interpersonal skills, including open-mindedness, adaptability, and the ability to build rapport with both internal teams and external partners.

Red Team Operations Manager

Senior Customer Experience Manager

Software Engineer II

Senior Director, Cybersecurity

Technical Pentest Manager