Application Security Engineer
Bugcrowd
full-time
Posted on:
Location Type: Remote
Location: Brazil
Visit company websiteExplore more
Tech Stack
About the role
- An ASE is responsible for the ongoing triage and validation services of Bugcrowd managed programs.
- Under the direction of the Director of Technical Operations, you will take incoming submission data and curate it for validity, accuracy, and severity as well as communicate directly with Bugcrowd’s clients or researchers when additional information is required.
- ASEs also handle Incident Response – escalating and communicating about the highest severity bugs to clients.
- ASEs need to have strong knowledge of OWASP Top Ten type vulnerabilities.
- They also usually require a strong skill set in one scripting/development language, often to assist with the design or development of tooling for improving the triage/validation process.
Requirements
- Bachelor’s degree or previous security consulting experience
- Published and demonstrated passion for security assessment research
- High proficiency with Burp Suite (or any other interception proxy) and a working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux)
- Ability to execute on individual projects but still contribute to the team
- Ability to complete tasks on time
- Strong organization, influencing, and communication skills
Benefits
- We have an awesome team and tons of perks. We’ve even been selected as one of “The 10 Coolest Security Startups Of 2016” by crn.com.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
scripting languagesecurity assessmentvulnerability validationincident responsetriage processOWASP Top Tentool development
Soft Skills
organizationinfluencingcommunicationproject executionteam contributiontime management